{"id":"EUVD-2026-98471","enisaUuid":"1641930b-069f-35c5-9e54-2609561a8b94","description":"A SQL injection vulnerability has been identified in Payload CMS. Improper neutralization of input provided by user into \"in\" and \"not_in\" query paramethers allows an authenticated attacker to perform SQL Injection attacks.\n\nThis issue was fixed in version 3.90.0 and 4.0.0-canary.34.","datePublished":"Oct 13, 2026, 11:05:09 AM","dateUpdated":"Oct 16, 2026, 5:17:14 PM","baseScore":8.7,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N","references":"https://cert.pl/posts/2026/10/CVE-2026-63316\nhttps://github.com/payloadcms/payload/security/advisories/GHSA-pj7x-6wpf-pgvp\n","aliases":"CVE-2026-63316\nGHSA-57gg-gh75-cfjg\n","assigner":"CERT-PL","epss":0.26,"enisaIdProduct":[{"id":"9c335d1d-b5ea-3075-9606-5cf6b74562b6","product":{"name":"Payload CMS","vendor":{"name":"Payload"}},"product_version":"4.0.0-canary.0 \u003c4.0.0-canary.34"},{"id":"d6648334-fd4b-3487-96bf-28dc8b3dde7d","product":{"name":"Payload CMS","vendor":{"name":"Payload"}},"product_version":"0 \u003c3.90.0"}],"enisaIdVendor":[{"id":"78befc84-ffda-3920-9177-a3b569c39060","vendor":{"name":"Payload"}}],"enisaIdVulnerability":[{"id":"333fddb4-a10a-3d35-8f8e-5a3536438878","vulnerability":{"id":"CVE-2026-63316","description":"A SQL injection vulnerability has been identified in Payload CMS. Improper neutralization of input provided by user into \"in\" and \"not_in\" query paramethers allows an authenticated attacker to perform SQL Injection attacks.\n\nThis issue was fixed in version 3.90.0 and 4.0.0-canary.34.","datePublished":"Oct 13, 2026, 11:05:09 AM","dateUpdated":"Oct 16, 2026, 5:17:14 PM","status":"PUBLISHED","baseScore":8.7,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N","references":"https://cert.pl/posts/2026/10/CVE-2026-63316\nhttps://github.com/payloadcms/payload/security/advisories/GHSA-pj7x-6wpf-pgvp\n","enisa_id":"EUVD-2026-98471\n","assigner":"CERT-PL","epss":0.26,"dataProcessed":"Oct 28, 2026, 7:15:21 AM","vulnerabilityProduct":[{"id":"7c58c26b-8975-3aa7-86df-e4801f4df083","product":{"name":"Payload CMS","vendor":{"name":"Payload"}},"product_version":"0 \u003c3.90.0"},{"id":"e93ded00-049c-31b1-8295-9e7a9ea3e1fe","product":{"name":"Payload CMS","vendor":{"name":"Payload"}},"product_version":"4.0.0-canary.0 \u003c4.0.0-canary.34"}],"vulnerabilityVendor":[{"id":"64f3cfe5-5d32-3bf8-843c-fcb95813221e","vendor":{"name":"Payload"}}]}},{"id":"b5f7ddb8-cbfd-3434-8ba1-39a13ba7db0e","vulnerability":{"id":"GHSA-57gg-gh75-cfjg","description":"A SQL injection vulnerability has been identified in Payload CMS. Improper neutralization of input provided by user into \"in\" and \"not_in\" query paramethers allows an authenticated attacker to perform SQL Injection attacks.\n\nThis issue was fixed in version 3.90.0 and 4.0.0-canary.34.","datePublished":"Oct 13, 2026, 12:32:58 PM","dateUpdated":"Oct 13, 2026, 3:32:11 PM","baseScore":0.0,"references":"https://github.com/payloadcms/payload/security/advisories/GHSA-pj7x-6wpf-pgvp\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-63316\nhttps://cert.pl/posts/2026/10/CVE-2026-63316\nhttps://cert.pl/posts/2026/11/CVE-2026-63316\n","enisa_id":"EUVD-2026-98471\n","aliases":"GHSA-57gg-gh75-cfjg\nCVE-2026-63316\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 2:03:05 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}