CyberSecBulletin

Delmaredigital vulnerabilities

We track 1 vulnerability in Delmaredigital products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 7, 2026.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Delmaredigital vulnerabilities

  • 9.8 Critical severity

    payload-puck: Missing Authorization

    CVE-2026-39397Delmaredigital

    @delmaredigital/payload-puck is a PayloadCMS plugin for integrating Puck visual page builder. Prior to 0.6.23, all /api/puck/* CRUD endpoint handlers registered by createPuckPlugin() called Payload's local API with the default overrideAccess: true, bypassing a