Payload CMS in/not_in query operators allow authenticated SQL injection. Patch to 3.90.0. https://intel.threadlinqs.com/threat/TL-2026-3399 #ThreatIntel #CVE_2026_63316 #payload #PayloadCMS
@threadlinqs.bsky.social
@threadlinqs.bsky.social
@threadlinqs.bsky.socialPayload CMS in/not_in query operators allow authenticated SQL injection. Patch to 3.90.0. https://intel.threadlinqs.com/threat/TL-2026-3399 #ThreatIntel #CVE_2026_63316 #payload #PayloadCMS