Skip to content
OpenAdvisories

Vendor

dani-garcia

20 known vulnerabilities.

Products

vaultwarden 20
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.3
    CVE-2026-43914 Public exploit

    Vaultwarden: Brute-force protection bypass vulnerability

    Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.35.4, there is a security vulnerability in Vaultwarden that allows bypassing the login brute-force protection if email 2fa is enabled. If email 2fa is enabled, the unprotected 2fa-functi…

    dani-garcia vaultwarden
  • Medium 6.5
    CVE-2026-26012 Public exploit

    vaultwarden has Full Cipher Enumeration Ignoring Organization Collection Permissions

    vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Prior to 1.35.3, a regular organization member can retrieve all ciphers within an organization, regardless of collection permissions. The endpoint /ciphe…

    dani-garcia vaultwarden