CVE-2026-11779

PayloadCMS 3.84.1 - Authenticated account lockout bypass through default unlock access PUBLISHED

Description (CNA)

An Improper Authorization vulnerability exists in PayloadCMS version 3.84.1 due to insufficient access control on the account unlock operation.

Vendor / product	Versions
PayloadCMS / PayloadCMS	affected 3.84.1

CWE-307

CISA-ADP

No English description supplied.