Skip to content
OpenAdvisories

Vendor

dani-garcia

20 known vulnerabilities.

Products

vaultwarden 20
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2026-43914 Public exploit

    Vaultwarden: Brute-force protection bypass vulnerability

    Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.35.4, there is a security vulnerability in Vaultwarden that allows bypassing the login brute-force protection if email 2fa is enabled. If email 2fa is enabled, the unprotected 2fa-functi…

    dani-garcia vaultwarden