CVE-2026-11779

Impact

An Improper Authorization vulnerability exists in PayloadCMS version 3.84.1 due to insufficient access control on the account unlock operation.

Affected packages

Weakness classification

References

• NVD record
• CVE.org record
• GitHub advisory
• https://github.com/advisories/GHSA-jg8r-5jh2-v2xj
• https://nvd.nist.gov/vuln/detail/CVE-2026-11779
• https://fluidattacks.com/es/advisories/stitches
• https://github.com/payloadcms/payload