{"vulnerability": "cve-2026-105863", "sightings": [{"uuid": "51da0b58-db45-4dc7-b247-17e5c8dbbb79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105863", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx7zlzpe2x27", "content": "\ud83d\udea8 CVE-2026-105863 \u2014 CVSS 9.2 CRITICAL\n\nPayload is a free and open source headless content management system. In versions after 3.0.0 and before 3....\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105863\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-06T18:08:50.962264Z"}, {"uuid": "6e195af8-400e-4d88-bf40-1474c3412d3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105863", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxbo72ux7v2w", "content": "CVE-2026-105863\nVersions of the free Payload content system from 3.0.0 up to but not including 3.90.0 can insert unexpected information into the authentication token that is created when users log in. This could allow users\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-10-07T09:50:04.194369Z"}]}