Browse all 8 CVE security advisories affecting bitwarden. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-60104 | Bitwarden Server < 2026.6.0 Authorization Bypass via Admin Auth Request — serverCWE-639 | 8.7 | High | 2026-07-08 |
| CVE-2026-57522 | Bitwarden Server < 2026.5.0 JSON Injection via Webhook Templates — serverCWE-74 | 3.5 | Low | 2026-06-25 |
| CVE-2026-57521 | Bitwarden Server < 2026.5.0 Broken Access Control via PreviewInvoiceController — serverCWE-862 | 4.3 | Medium | 2026-06-25 |
| CVE-2026-57520 | Bitwarden Server < 2026.5.0 Privilege Escalation via Bulk User Remove Endpoint — serverCWE-862 | 7.1 | High | 2026-06-25 |
| CVE-2026-43640 | Bitwarden Server < 2026.4.1 Authentication Bypass via SCIM API Key — serverCWE-303 | 8.1 | High | 2026-05-11 |
| CVE-2026-43639 | Bitwarden Server < 2026.4.0 Missing Authorization via Provider Clients — serverCWE-862 | 8.0 | High | 2026-05-11 |
| CVE-2026-43638 | Bitwarden Server < 2026.4.1 Missing Authorization via Organization Cipher Import — serverCWE-862 | 5.4 | Medium | 2026-05-11 |
| CVE-2026-42994 | Bitwarden CLI 操作系统命令注入漏洞 — Bitwarden CLICWE-78 | 9.8 | - | 2026-05-01 |
This page lists every published CVE security advisory associated with bitwarden. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.