CVE-2026-11779

Description

An Improper Authorization vulnerability exists in PayloadCMS version 3.84.1 due to insufficient access control on the account unlock operation.

References

• https://fluidattacks.com/es/advisories/stitches
• https://github.com/payloadcms/payload
• https://fluidattacks.com/es/advisories/stitches