Twenty CRM Flaw CVE-2026-105763 Exposes Plaintext Email Passwords to Any Workspace Member

Twenty CRM vulnerability CVE-2026-105763 (CVSS 9.6) enables plaintext password disclosure of IMAP and SMTP accounts. Upgrade to 2.7.0. Related Posts: Veeam Patches Critical Backup & Replication RCE Flaw CVE-2025-64393 and Two More Bugs WordPress 7.1.3 Security Update Fixes Stored XSS, SQL Injection and Five More Flaws SonicWall Patches CVSS 10 Pre-Auth SSRF Flaw and Three More Bugs in SMA1000 Appliances The post Twenty CRM Flaw CVE-2026-105763 Exposes Plaintext Email Passwords to Any Workspace Member appeared first on Daily CyberSecurity.
Quelle: securityonline.info