CVE-2026-34747 - Vulnerability Analysis

Overview

Payload < 3.79.1 contains a SQL injection caused by improper validation of certain request inputs, letting attackers expose or modify data in collections, exploit requires crafted requests.

Severity & Score

Impact

Attackers can expose or modify data in collections, potentially compromising data integrity and confidentiality.

Mitigation

Update to version 3.79.1 or later.

References

• https://github.com/payloadcms/payload/releases/tag/v3.79.1
• https://github.com/payloadcms/payload/security/advisories/GHSA-7xxh-373w-35vg

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner