Zurück zur CVE-Übersicht
CVE-2026-105857
CRITICAL(10.0)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Risk Signal Score25/100 — MITTEL
- CVSS 10 — Kritisch
EPSS-Score
0.4%
Exploit-Wahrscheinlichkeit (30 Tage)
CVSS Score
10
Technische Schwere
Beschreibung
Payload is a free and open source headless content management system. In @payloadcms/plugin-form-builder versions before 3.90.0 and canary versions before 4.0.0-canary.34, an attacker can craft a form submission that executes code remotely on the server. This issue is fixed in versions 3.90.0 and 4.0.0-canary.34.
Betroffene Produkte
- cpe:2.3:a:payloadcms:payload:*:*:*:*:*:node.js:*:*
- cpe:2.3:a:payloadcms:payload:4.0.0:canary0:*:*:*:node.js:*:*
- cpe:2.3:a:payloadcms:payload:4.0.0:canary1:*:*:*:node.js:*:*
- cpe:2.3:a:payloadcms:payload:4.0.0:canary10:*:*:*:node.js:*:*
- cpe:2.3:a:payloadcms:payload:4.0.0:canary11:*:*:*:node.js:*:*
- cpe:2.3:a:payloadcms:payload:4.0.0:canary12:*:*:*:node.js:*:*
- cpe:2.3:a:payloadcms:payload:4.0.0:canary13:*:*:*:node.js:*:*
- cpe:2.3:a:payloadcms:payload:4.0.0:canary14:*:*:*:node.js:*:*
- cpe:2.3:a:payloadcms:payload:4.0.0:canary15:*:*:*:node.js:*:*
- cpe:2.3:a:payloadcms:payload:4.0.0:canary16:*:*:*:node.js:*:*
- cpe:2.3:a:payloadcms:payload:4.0.0:canary17:*:*:*:node.js:*:*
- cpe:2.3:a:payloadcms:payload:4.0.0:canary18:*:*:*:node.js:*:*
- cpe:2.3:a:payloadcms:payload:4.0.0:canary19:*:*:*:node.js:*:*
- cpe:2.3:a:payloadcms:payload:4.0.0:canary2:*:*:*:node.js:*:*
- cpe:2.3:a:payloadcms:payload:4.0.0:canary20:*:*:*:node.js:*:*
- cpe:2.3:a:payloadcms:payload:4.0.0:canary21:*:*:*:node.js:*:*
- cpe:2.3:a:payloadcms:payload:4.0.0:canary22:*:*:*:node.js:*:*
- cpe:2.3:a:payloadcms:payload:4.0.0:canary23:*:*:*:node.js:*:*
- cpe:2.3:a:payloadcms:payload:4.0.0:canary24:*:*:*:node.js:*:*
- cpe:2.3:a:payloadcms:payload:4.0.0:canary25:*:*:*:node.js:*:*
GitHub Advisories
GHSA-r488-j9vj-wx3qCRITICAL
Payload Form Builder has an RCE issue
npm/@payloadcms/plugin-form-builder→ 3.90.0
GitHub Advisory