Tag

Cve-2026-101878

1 brief RSS

Authentication Bypass in Bitwarden Server via SSO Identifier Truncation

A SQL Server stored procedure parameter truncation vulnerability (CVE-2026-101878) in Bitwarden Server allows attackers to authenticate as other users by crafting overlapping SSO identifiers.

Bitwarden Server authentication-bypass cve-2026-101878 identity-management

1t 1c 11m ago