A vulnerability, which was classified as critical, was found in payloadcms payload up to 3.74.x. Impacted is an unknown function. Such manipulation leads to server-side request forgery.
This vulnerability is traded as CVE-2026-27567. The attack may be launched remotely. There is no exploit available.
You should upgrade the affected component.
