Skip to content

CyberSIXT Search

Vendor

payloadcms

article · all time: 1
CVEs tracked · all time: 1

One article so far, 10 Feb. A pattern appears once more outlets cover payloadcms.

Tue 10 Feb · first reportCVE-2026-25544: Critical Payload CMS SQLi (CVSS 9.8) Exposes Admin TokensSecurityOnline

Products: payload

CVEs

1 CVE

CVE-2026-25544Payload has an SQL Injection in JSON/RichText Queries on PostgreSQL/SQLite AdaptersCVSSUnrated–Not in KEV0.8%EPSS1article

Coverage

1 article, all timeRSS feed

10 FebCVE-2026-25544: Critical Payload CMS SQLi (CVSS 9.8) Exposes Admin TokensSecurityOnline · first in our coverage