Vulnerabilidades em bitwarden
9 resultadosAnálise Vexday
Bitwarden registra 7 vulnerabilidades na base Vexday, todas publicadas nos últimos 90 dias, com 1 classificada como crítica e nenhuma sob exploração ativa conhecida. A fraqueza dominante é CWE-862 (controle de acesso impróprio), indicando problemas estruturais em autorização que demandam atenção prioritária, especialmente considerando o risco recente e concentrado dessa janela temporal.
CVE-2026-43639HIGHBitwarden Server < 2026.4.0 Missing Authorization via Provider ClientsEPSS 0.6%CVE-2026-43640HIGHBitwarden Server < 2026.4.1 Authentication Bypass via SCIM API KeyEPSS 0.5%CVE-2026-57520HIGHBitwarden Server < 2026.5.0 Privilege Escalation via Bulk User Remove EndpointEPSS 0.4%CVE-2026-42994HIGHBitwarden CLI 2026.4.0 from 2026-04-22T21:57Z to 2026-04-22T23:30Z, when obtained from npm, had embedded malicious code. This is related to EPSS 0.3%CVE-2026-57522LOWBitwarden Server < 2026.5.0 JSON Injection via Webhook TemplatesEPSS 0.3%CVE-2026-57521MEDIUMBitwarden Server < 2026.5.0 Broken Access Control via PreviewInvoiceControllerEPSS 0.3%CVE-2026-60104CRITICALBitwarden Server < 2026.6.0 Authorization Bypass via Admin Auth RequestEPSS 0.2%CVE-2026-43638MEDIUMBitwarden Server < 2026.4.1 Missing Authorization via Organization Cipher ImportEPSS 0.2%CVE-2026-71959MEDIUMBitwarden Server < 2026.7.2 Audit Log Injection via POST /collectEPSS —