6 matches found
CVE-2026-119414
Bitwarden Server before 2026.10.1 on Entity Framework backends contains an authorization bypass vulnerability that allows organization members to add ciphers to collections they cannot edit. Attackers can call POST /api/ciphers/create, where a nulled UserId is treated as administrative, to inject...
CVE-2026-119414 Bitwarden Server before 2026.10.1 Authorization Bypass via POST /api/ciphers/create
Bitwarden Server before 2026.10.1 on Entity Framework backends contains an authorization bypass vulnerability that allows organization members to add ciphers to collections they cannot edit. Attackers can call POST /api/ciphers/create, where a nulled UserId is treated as administrative, to inject...
EUVD-2026-113794
Bitwarden Server before 2026.10.1 on Entity Framework backends contains an authorization bypass vulnerability that allows organization members to add ciphers to collections they cannot edit. Attackers can call POST /api/ciphers/create, where a nulled UserId is treated as administrative, to inject...
CVE-2026-119414
Bitwarden Server versions before 2026.10.1 using Entity Framework backends are vulnerable to an authorization bypass via the POST /api/ciphers/create endpoint. The vulnerability occurs because a nulled UserId is incorrectly treated as administrative, allowing organization members to inject vault ...
CVE-2026-119414 Bitwarden Server before 2026.10.1 Authorization Bypass via POST /api/ciphers/create
Bitwarden Server before 2026.10.1 on Entity Framework backends contains an authorization bypass vulnerability that allows organization members to add ciphers to collections they cannot edit. Attackers can call POST /api/ciphers/create, where a nulled UserId is treated as administrative, to inject...
PT-2026-133467
Bitwarden Server before 2026.10.1 on Entity Framework backends contains an authorization bypass vulnerability that allows organization members to add ciphers to collections they cannot edit. Attackers can call POST /api/ciphers/create, where a nulled UserId is treated as administrative, to inject...