Vulnerability index

Browse CVEs

6 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

CRITICAL 9.9 CVE-2026-46624 Twenty is an open source CRM. From 1.7.7 through 1.16.7, a critical Remote Code Execution (RCE) vulnerability exists in Twenty CRM via a chained SQL … Twenty 1.16.7+ Fix from $2,3002026-05-26 HIGH 8.7 CVE-2026-44729 Twenty is an open source CRM. In 1.18.0 and earlier, the file serving endpoints in Twenty CRM at /files/* and /file/:fileFolder/:id serve uploaded fi… Twenty after 1.18.0 Fix from $1,9502026-05-26 MEDIUM 5.0 CVE-2026-27023 Twenty is an open source CRM. Prior to version 1.18, the SSRF protection in SecureHttpClientService validated request URLs at the request level but d… Twenty 1.18.0+ Fix from $1,6002026-03-05 CRITICAL 9.8 CVE-2026-26720 An issue in Twenty CRM v1.15.0 and before allows a remote attacker to execute arbitrary code via the local.driver.ts module. Twenty after 1.15.0 Fix from $2,3002026-03-02 HIGH 7.6 CVE-2024-28434 The CRM platform Twenty is vulnerable to stored cross site scripting via file upload in version 0.3.0. A crafted svg file can trigger the execution o… Twenty No fix yet Fix from $1,9502024-03-25 MEDIUM 5.4 CVE-2024-28435 The CRM platform Twenty version 0.3.0 is vulnerable to SSRF via file upload. Twenty No fix yet Fix from $1,6002024-03-25