{"id":"EUVD-2026-17991","enisaUuid":"467954b0-8a0c-30a9-9fb7-749e7c4e5147","description":"Payload is a free and open source headless content management system. Prior to version 3.79.1 in @payloadcms/graphql and payload, a vulnerability in the password recovery flow could allow an unauthenticated attacker to perform actions on behalf of a user who initiates a password reset. This issue has been patched in version 3.79.1 for @payloadcms/graphql and payload.","datePublished":"Apr 1, 2026, 5:42:45 PM","dateUpdated":"Apr 4, 2026, 3:06:17 AM","baseScore":9.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","references":"https://github.com/payloadcms/payload/security/advisories/GHSA-hp5w-3hxx-vmwf\nhttps://github.com/payloadcms/payload/releases/tag/v3.79.1\n","aliases":"CVE-2026-34751\nGHSA-hp5w-3hxx-vmwf\n","assigner":"GitHub_M","epss":0.31,"enisaIdProduct":[{"id":"21ec5129-754c-35ab-a8b7-874690a275ce","product":{"name":"payload","vendor":{"name":"payloadcms"}},"product_version":"\u003c 3.79.1"}],"enisaIdVendor":[{"id":"9a3e0069-61e5-32a4-bad5-29d2eb3379da","vendor":{"name":"payloadcms"}}],"enisaIdVulnerability":[{"id":"05f601cf-086a-342a-8c05-0dc569e55b53","vulnerability":{"id":"GHSA-hp5w-3hxx-vmwf","description":"Payload: Pre-Authentication Account Takeover via Parameter Injection in Password Recovery","datePublished":"Apr 1, 2026, 4:08:02 PM","dateUpdated":"Apr 8, 2026, 6:19:10 PM","baseScore":0.0,"references":"https://github.com/payloadcms/payload/security/advisories/GHSA-hp5w-3hxx-vmwf\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-34751\nhttps://github.com/payloadcms/payload\nhttps://github.com/payloadcms/payload/releases/tag/v3.79.1\n","enisa_id":"EUVD-2026-17991\n","aliases":"GHSA-hp5w-3hxx-vmwf\nCVE-2026-34751\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:54:31 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"9f2b9b2a-583b-3b67-a46f-b5689e1c2d7f","vulnerability":{"id":"CVE-2026-34751","description":"Payload is a free and open source headless content management system. Prior to version 3.79.1 in @payloadcms/graphql and payload, a vulnerability in the password recovery flow could allow an unauthenticated attacker to perform actions on behalf of a user who initiates a password reset. This issue has been patched in version 3.79.1 for @payloadcms/graphql and payload.","datePublished":"Apr 1, 2026, 5:42:45 PM","dateUpdated":"Apr 4, 2026, 3:06:17 AM","status":"PUBLISHED","baseScore":9.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","references":"https://github.com/payloadcms/payload/security/advisories/GHSA-hp5w-3hxx-vmwf\nhttps://github.com/payloadcms/payload/releases/tag/v3.79.1\n","enisa_id":"EUVD-2026-17991\n","assigner":"GitHub_M","epss":0.31,"dataProcessed":"Oct 30, 2026, 7:19:03 AM","vulnerabilityProduct":[{"id":"eb09175e-6603-3eb5-b3ea-fad7dd88fedd","product":{"name":"payload","vendor":{"name":"payloadcms"}},"product_version":"\u003c 3.79.1"}],"vulnerabilityVendor":[{"id":"f2d85aef-7067-30f4-a29b-0c8c33f37140","vendor":{"name":"payloadcms"}}]}}],"enisaIdAdvisory":[]}