Skip to content
OpenAdvisories

Vendor

cobbr

2 known vulnerabilities.

Products

Covenant 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-92717

    Covenant through 0.6 Missing Authentication on the CovenantHub SignalR Hub

    Covenant through 0.6 registers the CovenantHub SignalR hub without an Authorize attribute, allowing unauthenticated callers to invoke CreateHttpListener and receive a signed JWT token. Attackers can use the obtained token to authenticate against the entire op…

    cobbr Covenant
  • Critical 9.8
    CVE-2020-36911 EPSS 12%

    Covenant 0.5 - Remote Code Execution (RCE)

    Covenant 0.1.3 - 0.5 contains a remote code execution vulnerability that allows attackers to craft malicious JWT tokens with administrative privileges. Attackers can generate forged tokens with admin roles and upload custom DLL payloads to execute arbitrary c…

    cobbr Covenant