SE
Product
server
10
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 4Low 0
Watch
Add server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-71959 | 5.8 | Aug 10 | Bitwarden Server < 2026.7.2 Audit Log Injection via POST /collect Affected: before 2026.7.2 |
| CVE-2026-43638 | 5.4 | May 11 | Bitwarden Server < 2026.4.1 Missing Authorization via Organization Cipher Import Affected: before 2026.4.1 |
| CVE-2026-57522 | 5.0 | Jun 25 | Bitwarden Server < 2026.5.0 JSON Injection via Webhook Templates Affected: before 2026.5.0 |
| CVE-2026-57521 | 4.3 | Jun 25 | Bitwarden Server < 2026.5.0 Broken Access Control via PreviewInvoiceController Affected: before 2026.5.0 |
Showing 4
