Cpe:2.3:a:payload:payloadcms_plugin_form_builder:*:*:*:*:*:*:*:*

A critical remote code execution vulnerability (CVE-2026-105857) in @payloadcms/plugin-form-builder allows unauthenticated attackers to execute arbitrary code via crafted form submissions.