CVE-2026-116678 | dani-garcia Vaultwarden up to 1.36.x Icon Downloader get_page_with_referer server-side request forgery

October 27, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in dani-garcia Vaultwarden up to 1.36.x. This impacts the function get_page_with_referer of the component Icon Downloader. Performing a manipulation results in server-side request forgery.

This vulnerability is identified as CVE-2026-116678. The attack can be initiated remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More