CVE-2026-43914
Vulnerability in Dani Garcia Vaultwarden
CVSS score
9.8
EPSS probability
%0.3
Risk score
0.0
Published
5 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
PoC for CVE-2026-43914: Vaultwarden <1.35.4 email-2FA brute-force bypass password oracle. Stdlib-only Python. (★2)
Makefile Go / Python
Similar Vulnerabilities
8.7
CVE-2026-43912Vulnerability in Dani Garcia Vaultwarden
Patch status unknown Public Exploits:1EPSS %0
8.1
CVE-2026-43913Incorrect authorization in Dani Garcia Vaultwarden
Patch status unknown Public Exploits:1EPSS %0
8.1
CVE-2026-43911Vulnerability in Dani Garcia Vaultwarden
Patch status unknown Public Exploits:1EPSS %0
5.3
CVE-2026-33420Missing authorization in Dani Garcia Vaultwarden
Patch status unknownEPSS %0
5.4
CVE-2026-31835Vulnerability in Dani Garcia Vaultwarden
Patch status unknown Public Exploits:1EPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-43914"