CVE-2026-34746

HIGH

Payload has Authenticated SSRF via Upload Functionality

Title source: cna
STIX 2.1

Description

Payload is a free and open source headless content management system. Prior to version 3.79.1, an authenticated Server-Side Request Forgery (SSRF) vulnerability exists in the upload functionality. Authenticated users with create or update access to an upload-enabled collection could cause the server to make outbound HTTP requests to arbitrary URLs. This issue has been patched in version 3.79.1.

References (2)

Scores

CVSS v3 7.7
EPSS 0.0001
EPSS Percentile 2.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-918
Status published
Products (2)
npm/payload 0 - 3.79.1npm
payloadcms/payload < 3.79.1 (2 CPE variants)
Published Apr 01, 2026
Tracked Since Apr 02, 2026