https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T13:20:41.020300+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-330693 EUVD-2026-330693 2026-10-06T13:20:41.067701+00:00 EUVD-2026-330693 https://cve.radiocsirt.org/vuln/fkie_cve-2026-11779 fkie_cve-2026-11779 2026-10-06T13:20:41.067738+00:00

An Improper Authorization vulnerability exists in PayloadCMS version 3.84.1 due to insufficient access control on the account unlock operation.

 https://cve.radiocsirt.org/vuln/ghsa-jg8r-5jh2-v2xj GHSA-jg8r-5jh2-v2xj — Payload CMS default account-unlock access allows authenticated users to reset other accounts' lockouts 2026-10-06T13:20:41.067769+00:00

Affected: npm: payload

An Improper Authorization vulnerability exists in PayloadCMS version 3.84.1 due to insufficient access control on the account unlock operation.