Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

vaultwarden — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in vaultwarden, with AI-generated Chinese analysis, references, and POCs.

Vendor: dani-garcia

CVE IDTitleCVSSSeverityPublished
CVE-2026-27898 Vaultwarden: Unauthorized Access via Partial Update API on Another User’s Cipher CWE-639 5.4 Medium2026-03-04
CVE-2026-27803 Vaultwarden: Collection Management Operations Allowed Without `manage` Verification for Manager Role CWE-269 8.3 High2026-03-04
CVE-2026-27802 Vaultwarden: Privilege Escalation via Bulk Permission Update to Unauthorized Collections by Manager CWE-269 8.3 High2026-03-04
CVE-2026-27801 Vaultwarden: 2FA Bypass on Protected Actions due to Faulty Rate Limit Enforcement CWE-307 8.8AIHighAI2026-03-04
CVE-2026-26012 vaultwarden has Full Cipher Enumeration Ignoring Organization Collection Permissions CWE-863 6.5 Medium2026-02-11
CVE-2025-24365 vaultwarden allows escalation of privilege via variable confusion in OrgHeaders trait CWE-284 8.1 High2025-01-27
CVE-2025-24364 vaultwarden allows RCE in the admin panel CWE-74 7.2 High2025-01-27
CVE-2024-56335 Privilege escalation allows organization groups to be updated/deleted if their UUID is known in vaultwarden CWE-269 7.6 High2024-12-20

All 8 known CVE vulnerabilities affecting vaultwarden with full Chinese analysis, references, and POCs where available.