Browse all 4 CVE security advisories affecting bitwarden. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-43640 | Bitwarden Server < 2026.4.1 Authentication Bypass via SCIM API Key — serverCWE-303 | 8.1 | High | 2026-05-11 |
| CVE-2026-43639 | Bitwarden Server < 2026.4.0 Missing Authorization via Provider Clients — serverCWE-862 | 8.0 | High | 2026-05-11 |
| CVE-2026-43638 | Bitwarden Server < 2026.4.1 Missing Authorization via Organization Cipher Import — serverCWE-862 | 5.4 | Medium | 2026-05-11 |
| CVE-2026-42994 | Bitwarden CLI 操作系统命令注入漏洞 — Bitwarden CLICWE-78 | 9.8 | - | 2026-05-01 |
This page lists every published CVE security advisory associated with bitwarden. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.