@securityonline.bsky.socialTwenty CRM vulnerability CVE-2026-105763 (CVSS 9.6) enables plaintext password disclosure of IMAP and SMTP accounts. Upgrade to 2.7.0.
#TwentyCRM #CRM #CVE2026105763 #GraphQL #CredentialLeak #OpenSource #EmailSecurity #Vulnerability
@hugovalters.bsky.socialTwenty CRM carries 100% unpatched CVEs and a D trust score. Max CVSS 9.9 with XSS and SSRF flaws; CVE count up 5 since 2024. Self-hosting does not mean secure by default. Review your exposure. https://www.valtersit.com/vendors/twenty/ #cybersecurity #infosec #TwentyCRM