https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T10:52:53.941689+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-336814 EUVD-2026-336814 2026-10-05T10:52:53.944312+00:00 EUVD-2026-336814 https://cve.radiocsirt.org/vuln/fkie_cve-2026-43638 fkie_cve-2026-43638 2026-10-05T10:52:53.944343+00:00

Bitwarden Server prior to v2026.4.1 contains a missing authorization vulnerability that allows any authenticated user to write ciphers into an arbitrary organization via `POST /ciphers/import-organization` by submitting an empty `collections` array, which causes the server-side permission check to be skipped.

 https://cve.radiocsirt.org/vuln/ghsa-vvm4-hc77-cqmc GHSA-vvm4-hc77-cqmc 2026-10-05T10:52:53.944386+00:00

Bitwarden Server prior to v2026.4.1 contains a missing authorization vulnerability that allows any authenticated user to write ciphers into an arbitrary organization via `POST /ciphers/import-organization` by submitting an empty `collections` array, which causes the server-side permission check to be skipped.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1465 WID-SEC-W-2026-1465 — Bitwarden: Mehrere Schwachstellen 2026-10-05T10:52:53.944404+00:00

Ein Angreifer kann mehrere Schwachstellen in Bitwarden ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um seine Privilegien zu erhöhen.