<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: bitwarden-server</title><description>Every new CVE for bitwarden-server.</description><link>https://agentprime.io/</link><item><title>CVE-2026-119414: Bitwarden Server before 2026.10.1 Authorization Bypass via POST /api/ciphers/create</title><link>https://agentprime.io/advisories/CVE-2026-119414/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-119414/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Oct 2026 11:30:47 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-101878: Bitwarden Server 2025.6.0 &lt; 2025.6.0 Authentication Bypass via SSO Identifier Truncation</title><link>https://agentprime.io/advisories/CVE-2026-101878/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-101878/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 29 Sep 2026 01:58:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-71959: Bitwarden Server &lt; 2026.7.2 Audit Log Injection via POST /collect</title><link>https://agentprime.io/advisories/CVE-2026-71959/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-71959/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 10 Aug 2026 13:56:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-60104: Bitwarden Server &lt; 2026.6.0 Authorization Bypass via Admin Auth Request</title><link>https://agentprime.io/advisories/CVE-2026-60104/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-60104/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 08 Jul 2026 19:34:49 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-57522: Bitwarden Server &lt; 2026.5.0 JSON Injection via Webhook Templates</title><link>https://agentprime.io/advisories/CVE-2026-57522/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-57522/</guid><description>CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 Jun 2026 19:09:33 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-57521: Bitwarden Server &lt; 2026.5.0 Broken Access Control via PreviewInvoiceController</title><link>https://agentprime.io/advisories/CVE-2026-57521/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-57521/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 Jun 2026 19:09:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-57520: Bitwarden Server &lt; 2026.5.0 Privilege Escalation via Bulk User Remove Endpoint</title><link>https://agentprime.io/advisories/CVE-2026-57520/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-57520/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 Jun 2026 19:08:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-43640: Bitwarden Server &lt; 2026.4.1 Authentication Bypass via SCIM API Key</title><link>https://agentprime.io/advisories/CVE-2026-43640/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-43640/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 11 May 2026 17:14:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-43639: Bitwarden Server &lt; 2026.4.0 Missing Authorization via Provider Clients</title><link>https://agentprime.io/advisories/CVE-2026-43639/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-43639/</guid><description>CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 11 May 2026 17:14:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-43638: Bitwarden Server &lt; 2026.4.1 Missing Authorization via Organization Cipher Import</title><link>https://agentprime.io/advisories/CVE-2026-43638/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-43638/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 11 May 2026 17:13:31 GMT</pubDate><category>CVE</category></item></channel></rss>