Threats tagged 'ghsa-97rh-rhh2-7vjv'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.1	EPSS 0.5%	CVE-2026-105858payloadcms payload · Code Injection High8.1EPSS 0.5%2026-10-06CVE Database V5CVE-2026-105858 PayloadCMS versions prior to 3.90.0 and canary versions before 4.0.0-canary.34 contain a code injection vulnerability in the public first-register operation. This flaw allows remote code execution when local authentication is enabled and no initial user has been created. The vulnerability is addressed in versions 3.90.0 and 4.0.0-canary.34. EPSS 0.5%Vulnerability CWE-94 #ghsa-97rh-rhh2-7vjv #npm	CVE Database V5	2026-10-06

Page 1 of 1