Vulnerability in Dani-garcia Vaultwarden

CVE-2026-27801

Vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Vaultwarden versions 1.34.3 and prior are susceptible to a 2FA bypass when performing protected actions. An attacker who gains authen…

EPSS: 0.000 (2.8th percentile) — read the EPSS interpretation.