VULNRABLE / Vulnerability / CVE-2026-105844
CVE-2026-105844
CRITICAL WATCH @payloadcms/plugin-import-export GHSA
Exploit verdict: CVSS 9.5 · no EPSS data
CVSS Score
9.5
Severity
CRITICAL
EPSS
—
Source
GHSA
Summary
Payload: Prototype pollution in Payload Import Export plugin
What this means
CVE-2026-105844 is a critical-severity vulnerability affecting @payloadcms/plugin-import-export, rated CVSS 9.5. Published October 6, 2026.
View full advisory at GHSA →