CVE-2026-43914-PoC

CVE-2026-43914 — Bypass della protezione brute-force Email-2FA di Vaultwarden Proof-of-concept per CVE-2026-43914 : quando Email 2FA è abilitato, la protezione brute-force del login di Vaultwarden può essere completamente aggirata tramite l'endpoint non autenticato POST...

Bitwarden: Rate limits too low for email 2FA

NO RATE LIMIT ON 2FA CAN LEAD TO ACCOUNT COMPROMISE! 1. Create account on vault.bitwarden.com if you don't have. 2.Setup 2FA via email 3.Logout and log in again. This time along with password you have to fill the 2fa code which is sent to the email. 4.Type Any Random number, intercept request wit...