CVE-2026-26720

Mô tả

Tham khảo

• dillonkirsch.com/post/locally_hosted_twenty_rce_cve_2026_26720 · Exploit
• dillonkirsch/CVE-2026-26720-Twenty-RCE · Exploit
• twenty.com · Product

Lỗ hổng khác của twenty

• CVE-2026-46624NGHIÊM TRỌNG 9.9Twenty is an open source CRM. From 1.7.7 through 1.16.7, a critical Remote Code Execution (RCE) vulnerability exists in Twenty CRM via a cha…
• CVE-2026-44729CAO 8.7Twenty is an open source CRM. In 1.18.0 and earlier, the file serving endpoints in Twenty CRM at /files/* and /file/:fileFolder/:id serve up…
• CVE-2026-27023TRUNG BÌNH 5.0Twenty is an open source CRM. Prior to version 1.18, the SSRF protection in SecureHttpClientService validated request URLs at the request le…
• CVE-2024-28435TRUNG BÌNH 5.4The CRM platform Twenty version 0.3.0 is vulnerable to SSRF via file upload.
• CVE-2024-28434CAO 7.6The CRM platform Twenty is vulnerable to stored cross site scripting via file upload in version 0.3.0. A crafted svg file can trigger the ex…