CVE-2026-85055
Twenty: Field-level read bypass
CVSS score
7.1
EPSS probability
%0.4
Risk score
0.0
Published
20 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.1
CVE-2026-73069
Twenty: SQL Injection in the `searchVector` Field Settings Allows Arbitrary PostgreSQL Execution
T
Patch status unknownEPSS %1
7.1
CVE-2026-92771
Twenty before 2.35.0 Permission Bypass via groupBy-with-records Query
T
Patch status unknownEPSS %0
9.6
CVE-2026-105763
Twenty: Plaintext IMAP/SMTP/CalDAV password disclosure to any workspace member via /metadata GraphQL
T
Patch status unknownEPSS %0
5.3
CVE-2026-82274
Twenty Open Redirect via OAuth Propagator Callback
T
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-85055"