B
Vendor security profile
bitwarden
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs9
Critical1
CISA KEV0
Public exploit8
Patch rate%100
Avg. CVSS6.8
12-month vulnerability rate
0
0
0
0
0
0
3
3
1
1
1
0
CVE KEV
CVE severity distribution
9toplam CVE
Critical1 (11%)
High4 (44%)
Medium4 (44%)
Patch and exploitation view
%100
Verified patch
%0
CISA KEV
%89
Public exploit
9Patch available
0Partial
0Workaround
0Vendor: no patch
0Unknown
Latest vulnerabilities
7.7
CVE-2026-101878
Bitwarden Server 2025.6.0 < 2025.6.0 Authentication Bypass via SSO Identifier Truncation
B
Patch verifiedEPSS %0
6.9
CVE-2026-71959
Bitwarden Server < 2026.7.2 Audit Log Injection via POST /collect
B
Patch verifiedEPSS %0
8.0
CVE-2026-60104
Vulnerability in Bitwarden Server
B
Patch verifiedEPSS %0
5.0
CVE-2026-57522
Vulnerability in Bitwarden Server
B
Patch verifiedEPSS %0
4.3
CVE-2026-57521
Missing authorization in Bitwarden Server
B
Patch verifiedEPSS %0
7.1
CVE-2026-57520
Missing authorization in Bitwarden Server
B
Patch verifiedEPSS %1
8.1
CVE-2026-43640
Vulnerability in Bitwarden Server
B
Patch verifiedEPSS %1
9.1
CVE-2026-43639
Missing authorization in Bitwarden Server
B
Patch verifiedEPSS %1
5.4
CVE-2026-43638
Missing authorization in Bitwarden Server
B
Patch verifiedEPSS %0