VULNRABLE / Vulnerability / CVE-2026-105848
CVE-2026-105848
MEDIUM LOW @payloadcms/plugin-stripe GHSA
Exploit verdict: No active-exploit signal
CVSS Score
5.5
Severity
MEDIUM
EPSS
—
Source
GHSA
Summary
Payload: Insufficient Access Control in Stripe REST Proxy
What this means
CVE-2026-105848 is a medium-severity vulnerability affecting @payloadcms/plugin-stripe, rated CVSS 5.5. Published October 6, 2026.
View full advisory at GHSA →