Twenty CRM GraphQL Flaw Exposes Plaintext External Service Credentials

A CVSS 9.6 GraphQL flaw in Twenty CRM leaks plaintext credentials, plus two Red Hat SSSD CVEs.

2026-10-06 03:31 UTC

🔓 CVEs & KEV

CVE-2026-105763 — twentyhq twenty — CVSS 9.6 — Twenty CRM GraphQL Flaw Exposes Plaintext External Service Credentials
CVE-2026-92821 — Red Hat Enterprise Linux 10 — CVSS 6.8 — Sssd: sssd: access control bypass via premature ldap access rule evaluationA ...
CVE-2026-104044 — Red Hat Enterprise Linux 10 — CVSS 6.2 — Sssd: sssd: denial of service via crafted passkey kerberos authentication req...

Start with the free Posture Self-Check to see where you stand against the current threat landscape.