CVE-2026-11779
PayloadCMS 3.84.1 - Authenticated account lockout bypass through default unlock access
An Improper Authorization vulnerability exists in PayloadCMS version 3.84.1 due to insufficient access control on the account unlock operation.
CVSS 4.0 · 5.3 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products