@payloadcms Plugin-mcp vulnerabilities

• @payloadcms plugin-mcp, payloadcms payload +1 more Payload: Improper access control for MCP API keys CVE-2026-105806 Fix available 8.6 HighOctober 6, 2026