Vulnerability Details CVE-2026-105846
Payload is a free and open source headless content management system. In versions from 3.40.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an attacker can craft a redirect URL parameter that sends a guest user to an untrusted destination after the authentication flow completes. This issue is fixed in versions 3.88.0 and 4.0.0-canary.27.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 12.2%
CVSS Severity
CVSS v3 Score 6.1
References
Products affected by CVE-2026-105846
-
cpe:2.3:a:payloadcms:payload:3.40.0
-
cpe:2.3:a:payloadcms:payload:3.41.0
-
cpe:2.3:a:payloadcms:payload:3.42.0
-
cpe:2.3:a:payloadcms:payload:3.43.0
-
cpe:2.3:a:payloadcms:payload:3.44.0
-
cpe:2.3:a:payloadcms:payload:3.45.0
-
cpe:2.3:a:payloadcms:payload:3.46.0
-
cpe:2.3:a:payloadcms:payload:3.47.0
-
cpe:2.3:a:payloadcms:payload:3.48.0
-
cpe:2.3:a:payloadcms:payload:3.49.0
-
cpe:2.3:a:payloadcms:payload:3.49.1
-
cpe:2.3:a:payloadcms:payload:3.50.0
-
cpe:2.3:a:payloadcms:payload:3.51.0
-
cpe:2.3:a:payloadcms:payload:3.52.0
-
cpe:2.3:a:payloadcms:payload:3.53.0
-
cpe:2.3:a:payloadcms:payload:3.54.0
-
cpe:2.3:a:payloadcms:payload:3.55.0
-
cpe:2.3:a:payloadcms:payload:3.55.1
-
cpe:2.3:a:payloadcms:payload:3.56.0
-
cpe:2.3:a:payloadcms:payload:3.57.0
-
cpe:2.3:a:payloadcms:payload:3.58.0
-
cpe:2.3:a:payloadcms:payload:3.59.0
-
cpe:2.3:a:payloadcms:payload:3.59.1
-
cpe:2.3:a:payloadcms:payload:3.60.0
-
cpe:2.3:a:payloadcms:payload:3.61.0
-
cpe:2.3:a:payloadcms:payload:3.61.1
-
cpe:2.3:a:payloadcms:payload:3.62.0
-
cpe:2.3:a:payloadcms:payload:3.62.1
-
cpe:2.3:a:payloadcms:payload:3.63.0
-
cpe:2.3:a:payloadcms:payload:3.64.0
-
cpe:2.3:a:payloadcms:payload:3.65.0
-
cpe:2.3:a:payloadcms:payload:3.66.0
-
cpe:2.3:a:payloadcms:payload:3.67.0
-
cpe:2.3:a:payloadcms:payload:3.68.0
-
cpe:2.3:a:payloadcms:payload:3.68.1
-
cpe:2.3:a:payloadcms:payload:3.68.2
-
cpe:2.3:a:payloadcms:payload:3.68.3
-
cpe:2.3:a:payloadcms:payload:3.68.4
-
cpe:2.3:a:payloadcms:payload:3.68.5
-
cpe:2.3:a:payloadcms:payload:3.69.0
-
cpe:2.3:a:payloadcms:payload:3.70.0
-
cpe:2.3:a:payloadcms:payload:3.71.0
-
cpe:2.3:a:payloadcms:payload:3.71.1
-
cpe:2.3:a:payloadcms:payload:3.72.0
-
cpe:2.3:a:payloadcms:payload:3.73.0
-
cpe:2.3:a:payloadcms:payload:3.74.0
-
cpe:2.3:a:payloadcms:payload:3.75.0
-
cpe:2.3:a:payloadcms:payload:3.76.0
-
cpe:2.3:a:payloadcms:payload:3.76.1
-
cpe:2.3:a:payloadcms:payload:3.77.0
-
cpe:2.3:a:payloadcms:payload:3.78.0
-
cpe:2.3:a:payloadcms:payload:3.79.0
-
cpe:2.3:a:payloadcms:payload:3.79.1
-
cpe:2.3:a:payloadcms:payload:3.80.0
-
cpe:2.3:a:payloadcms:payload:3.81.0
-
cpe:2.3:a:payloadcms:payload:3.82.0
-
cpe:2.3:a:payloadcms:payload:3.82.1
-
cpe:2.3:a:payloadcms:payload:3.83.0
-
cpe:2.3:a:payloadcms:payload:3.84.0
-
cpe:2.3:a:payloadcms:payload:3.84.1
-
cpe:2.3:a:payloadcms:payload:3.85.0
-
cpe:2.3:a:payloadcms:payload:3.85.1
-
cpe:2.3:a:payloadcms:payload:3.85.2
-
cpe:2.3:a:payloadcms:payload:3.86.0
-
cpe:2.3:a:payloadcms:payload:3.87.0
-
cpe:2.3:a:payloadcms:payload:3.87.1
-
cpe:2.3:a:payloadcms:payload:4.0.0