Skip to content
OpenAdvisories

Vendor

Black Duck

7 known vulnerabilities.

Products

Coverity 2 blackduck-c-cpp 2 Coverity Connect 2 Black Duck SCA 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.2
    CVE-2026-8338

    Authentication and Authorization Bypass in Coverity Connect

    A Spring Security authentication and authorization bypass exists in Coverity Connect versions between 2023.6.0 and 2026.3.0. An unauthenticated malicious threat actor that can send a specially crafted HTTP request is able to bypass authentication and authoriz…

    Black Duck Coverity Connect
  • Critical 9.3
    CVE-2026-1496

    Coverity CLI Authentication Bypass

    Vulnerable versions of Coverity Connect lack an error handler in the authentication logic for command line tooling that makes it vulnerable to an authentication bypass. A malicious actor with access to the /token API endpoint that either knows or guesses a va…

    Black Duck Coverity