https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T21:12:05.458542+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-317358 EUVD-2026-317358 2026-10-06T21:12:05.500070+00:00 EUVD-2026-317358 https://cve.radiocsirt.org/vuln/fkie_cve-2026-43911 fkie_cve-2026-43911 2026-10-06T21:12:05.500110+00:00

Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.35.5, refresh tokens are not invalidated when the user's security_stamp is rotated by some security-sensitive operations (password change, KDF change, key rotation, email change, org admin password reset, emergency access takeover). This allows an attacker holding a previously obtained refresh token to maintain session access even after the user has taken action to secure their account. This vulnerability is fixed in 1.35.5.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1285 WID-SEC-W-2026-1285 — Vaultwarden: Mehrere Schwachstellen 2026-10-06T21:12:05.500147+00:00

Ein Angreifer kann mehrere Schwachstellen in Vaultwarden ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, und um Informationen offenzulegen.