CVE-2026-1496
CriticalSummary
Vulnerable versions of Coverity Connect lack an error handler in the authentication logic for command line tooling, making it vulnerable to an authentication bypass. An attacker with access to the /token API endpoint who knows or guesses a valid username can use a specially crafted HTTP request to bypass authentication and assume all roles and privileges of the valid user's account.
Risk Assessment
An attacker can gain full access to a Coverity Connect user account, potentially leading to unauthorized access to sensitive data and confidentiality breach.
Recommendation
Apply the vendor-provided patch for Coverity Connect and restrict access to the /token endpoint.
Other vulnerabilities in Coverity Connect
See all- CVE-2026-8338Critical
Coverity Connect versions between 2023.6.0 and 2026.3.0 have a Spring Security authentication and authorization bypass vulnerability. An unauthenticated attacker can send a crafted HTTP request to access data within Coverity.
- CVE-2026-8339High
A SQL injection vulnerability in Coverity Connect SOAP API for versions 2024.6.0 through 2026.3.0. An authenticated attacker can send a crafted payload to achieve full read access to the database and execute unauthorized commands.
Original NVD description (English source)
Vulnerable versions of Coverity Connect lack an error handler in the authentication logic for command line tooling that makes it vulnerable to an authentication bypass. A malicious actor with access to the /token API endpoint that either knows or guesses a valid username, can use this in a specially crafted HTTP request to bypass authentication. Successful exploitation allows the malicious actor to assume all roles and privileges granted to the valid user’s Coverity Connect account.