Coverity Connect vulnerabilities

2 known vulnerabilities in Coverity Connect from Black Duck. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  Coverity Connect: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-8339Jul 29, 2026Black Duck

  A SQL injection vulnerability exists in the Coverity Connect SOAP API for versions between 2024.6.0 and 2026.3.0 (inclusive). A malicious, authenticated threat actor who sends a specially crafted payload can achieve full read access to database contents and ot

• 9.2 Critical severity

  Coverity Connect: Authentication Bypass Using an Alternate Path or Channel

  CVE-2026-8338Jul 29, 2026Black Duck

  A Spring Security authentication and authorization bypass exists in Coverity Connect versions between 2023.6.0 and 2026.3.0. An unauthenticated malicious threat actor that can send a specially crafted HTTP request is able to bypass authentication and authoriza