A vulnerability, which was classified as critical, was found in payloadcms payload up to 3.79.0. This impacts an unknown function of the component Password Reset Handler. Executing a manipulation can lead to external control of assumed-immutable web parameter.
This vulnerability appears as CVE-2026-34751. The attack may be performed from remote. There is no available exploit.
You should upgrade the affected component.
