Twilio

Records2All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Twilio records in CISA KEV

TI-2024-26788 Twilio Authy Information Disclosure Vulnerability HIGH 81KEV 2024-07-23

Components

Products in the NVD configurations · select one to filter the records

Authy 1 record HIGH Authy 2-factor Authentication 1 record LOW Authy Authenticator 1 record HIGH

Records

1 record in Authy · all components

TI-2024-26788 CVE-2024-39891 · GHSA-vg5j-h7r8-88x8

In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before…

HIGH 81KEV

In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an unauthenticated endpoint provided access to certain phone-number data, as exploited in the wild in June 2024.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01669 Published 2024-07-02 No fix listed CWE-203

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0