bitwarden Server Vulnerabilities

Bitwarden Server vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

25 June 2026

JSON Injection Vulnerability in Bitwarden Server from Bitwarden
CVE-2026-57522
BitwardenServer👾🟡2.3LOW
Broken Access Control in Bitwarden Server Affecting User Billing Data
CVE-2026-57521
BitwardenServer👾🟡5.3MEDIUM
Privilege Escalation Vulnerability in Bitwarden Server by Bitwarden
CVE-2026-57520
BitwardenServer👾🟡7.1HIGH

11 May 2026

Authentication Bypass in Bitwarden Server Affects API Key Management
CVE-2026-43640
BitwardenServer👾🟡8.6HIGH
Missing Authorization Vulnerability in Bitwarden Server by Bitwarden
CVE-2026-43639
BitwardenServer👾🟡8.9HIGH
Missing Authorization in Bitwarden Server Allows Unauthorized Cipher Writing
CVE-2026-43638
BitwardenServer👾🟡5.3MEDIUM

21 July 2020

Server-Side Request Forgery Risk in Bitwarden Server by Bitwarden
CVE-2020-15879
BitwardenServer7.5HIGH

12 December 2019

Potentially Unwanted KDF Vulnerability in Bitwarden Server Software
CVE-2019-19766
BitwardenServer7.5HIGH