payloadcms Payload Vulnerabilities

Payloadcms Payload vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

25 September 2026

Improper Access Control in Payload CMS Storage Adapter
CVE-2026-93363
PayloadcmsPayload5.3MEDIUM

1 April 2026

File Sanitation Flaw in Payload CMS Affecting Azure, GCS, R2, and S3 Storage
CVE-2026-34750
PayloadcmsPayload6.5MEDIUM
CSRF Vulnerability in Payload CMS Prior to Version 3.79.1
CVE-2026-34749
PayloadcmsPayload5.4MEDIUM
XSS Vulnerability in Payload CMS Admin Panel Affects Users
CVE-2026-34748
PayloadcmsPayload8.7HIGH
SQL Injection Vulnerability in Payload CMS Affects Versions Prior to 3.79.1
CVE-2026-34747
PayloadcmsPayload8.5HIGH
Server-Side Request Forgery in Payload CMS Affects Upload Functionality
CVE-2026-34746
PayloadcmsPayload7.7HIGH
Vulnerability in Payload CMS Affects Password Recovery Flow
CVE-2026-34751
PayloadcmsPayload9.1CRITICAL

24 February 2026

Server-Side Request Forgery Vulnerability in Payload CMS
CVE-2026-27567
PayloadcmsPayload6.5MEDIUM

6 February 2026

26 April 2023

Payload's hidden fields can be leaked on readable collections
CVE-2023-30843
PayloadcmsPayload7.4HIGH

12 April 2022

Arbitrary File Upload Vulnerability in PayloadCMS by Payload
CVE-2022-27952
PayloadcmsPayload9.8CRITICAL