{"uuid": "7ea6c504-6be7-4600-b6a7-f7e40afcc6b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-105763", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117391021717850613", "content": "CVE-2026-105763 (CRITICAL): twentyhq twenty CRM v1.20.10 \u2013 2.7.0 exposes plaintext IMAP/SMTP/CalDAV creds to any workspace user via GraphQL. Upgrade to 2.7.0 to prevent mail/calendar compromise. https://radar.offseq.com/threat/cve-2026-105763-cwe-522-insufficiently-protected-credentials-in-twentyhq-twenty-8c5491429285ac63 #OffSeq #Vuln #CRM #twentyhq", "creation_timestamp": "2026-10-06T00:00:38.924043Z"}