CVE-2026-8338 in Coverity Connectinformazioni

Riassunto

di MITRE • 29/07/2026

A Spring Security authentication and authorization bypass exists in Coverity Connect versions between 2023.6.0 and 2026.3.0. An unauthenticated malicious threat actor that can send a specially crafted HTTP request is able to bypass authentication and authorization controls on certain API endpoints to access data within Coverity.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsabile

BlackDuck

Prenotare

11/05/2026

Divulgazione

29/07/2026

Moderazione

accettato

CPE

pronto

EPSS

0.00000

KEV

no

Attività

basso

Fonti

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-8338
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-8338
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-8338/

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!