Skip to content

CVE-2026-101878

CVE

Threat entity extracted from intelligence sources

Frequency
3
occurrences
First Seen
September 29, 2026
Last Seen
September 29, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

A vulnerability in Bitwarden Server versions 2025.6.0 to 2026.5.0 allows attackers to exploit an SSO identifier truncation issue. The stored procedure @ExternalId was defined as NVARCHAR(50) while the corresponding database column was NVARCHAR(300), leading to silent truncation of identifiers. This...

Public Exploits

Checking GitHub for proof-of-concept code…