- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/19/2026, server recorded 1 security vulnerability in the last 90 days, of which 0 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of server and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-71959Bitwarden Server < 2026.7.2 Audit Log Injection via POST /collectCVE-2026-60104Bitwarden Server < 2026.6.0 Authorization Bypass via Admin Auth RequestCVE-2026-57522Bitwarden Server < 2026.5.0 JSON Injection via Webhook TemplatesCVE-2026-57521Bitwarden Server < 2026.5.0 Broken Access Control via PreviewInvoiceControllerCVE-2026-57520Bitwarden Server < 2026.5.0 Privilege Escalation via Bulk User Remove Endpoint| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-71959Bitwarden Server < 2026.7.2 Audit Log Injection via POST /collect | Exploitation statusActively exploited | FixYes | Published08/10/2026 | SeverityMedium |
CVE-2026-60104Bitwarden Server < 2026.6.0 Authorization Bypass via Admin Auth Request | Exploitation statusActively exploited | FixYes | Published07/08/2026 | SeverityCritical |
CVE-2026-57522Bitwarden Server < 2026.5.0 JSON Injection via Webhook Templates | Exploitation statusActively exploited | FixYes | Published06/25/2026 | SeverityLow |
CVE-2026-57521Bitwarden Server < 2026.5.0 Broken Access Control via PreviewInvoiceController | Exploitation statusActively exploited | FixYes | Published06/25/2026 | SeverityMedium |
CVE-2026-57520Bitwarden Server < 2026.5.0 Privilege Escalation via Bulk User Remove Endpoint | Exploitation statusActively exploited | FixYes | Published06/25/2026 | SeverityHigh |
CVE-2026-43640Bitwarden Server < 2026.4.1 Authentication Bypass via SCIM API Key | Exploitation statusActively exploited | FixYes | Published05/11/2026 | SeverityHigh |
CVE-2026-43639Bitwarden Server < 2026.4.0 Missing Authorization via Provider Clients | Exploitation statusActively exploited | FixYes | Published05/11/2026 | SeverityHigh |
CVE-2026-43638Bitwarden Server < 2026.4.1 Missing Authorization via Organization Cipher Import | Exploitation statusActively exploited | FixYes | Published05/11/2026 | SeverityMedium |
CVE-2020-15879CVE-2020-15879 | Exploitation statusNot confirmed | FixNo | Published07/21/2020 | SeverityUnknown |
CVE-2019-19766CVE-2019-19766 | Exploitation statusNot confirmed | FixNo | Published12/12/2019 | SeverityUnknown |
10 Results | Page 1 of 1