Skip to content
OpenAdvisories

Archive

11 February 2026

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 5.5
    CVE-2026-20660 Public exploit

    A path handling issue was addressed with improved logic. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7…

  • Medium 6.5
    CVE-2026-26012 Public exploit

    vaultwarden has Full Cipher Enumeration Ignoring Organization Collection Permissions

    vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Prior to 1.35.3, a regular organization member can retrieve all ciphers within an organization, regardless of collection permissions. The endpoint /ciphe…