SE
Product
server
by bitwarden · last CVE Aug 10, 2026
10
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 4Low 0
Watch

Add server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-71959
5.8
0%
Aug 10
Bitwarden Server < 2026.7.2 Audit Log Injection via POST /collect
Affected: before 2026.7.2
CVE-2026-43638
5.4
0%
May 11
Bitwarden Server < 2026.4.1 Missing Authorization via Organization Cipher Import
Affected: before 2026.4.1
CVE-2026-57522
5.0
0%
Jun 25
Bitwarden Server < 2026.5.0 JSON Injection via Webhook Templates
Affected: before 2026.5.0
CVE-2026-57521
4.3
0%
Jun 25
Bitwarden Server < 2026.5.0 Broken Access Control via PreviewInvoiceController
Affected: before 2026.5.0
Showing 4