Login Request a demo
VA
Product
vaultwarden
by dani-garcia · last CVE Oct 27, 2026
26
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities26In the news0Timeline
Severity mix
Critical 3High 12Medium 11Low 0
Severity
All severities26Critical3High12Medium11Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add vaultwarden to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-43914
9.8
0%
May 11
Vaultwarden: Brute-force protection bypass vulnerability
Affected: < 1.35.4
CVE-2024-55225
9.8
1%
Jan 9
An issue in the component src/api/identity.rs of Vaultwarden prior to v1.32.5 allows attackers to impersonate users, including Administrators, via a crafted authorization request
Affected: before 1.32.5
CVE-2024-55224
9.6
1%
Jan 9
An HTML injection vulnerability in Vaultwarden prior to v1.32.5 allows attackers to execute arbitrary code via injecting a crafted payload into the username field of an e-mail…
Affected: before 1.32.5
Showing 3