CVE-2026-1496
Full vulnerability record from the local CVENow database.
Description
Vulnerable versions of Coverity Connect lack an error handler in the authentication logic for command line tooling that makes it vulnerable to an authentication bypass. A malicious actor with access to the /token API endpoint that either knows or guesses a valid username, can use this in a specially crafted HTTP request to bypass authentication. Successful exploitation allows the malicious actor to assume all roles and privileges granted to the valid user’s Coverity Connect account.
Severity
CRITICAL
CVSS score
9.3
(v4.0)
Vulnerability status
Awaiting Analysis
Source identifier
Published
2026-03-27 15:16:48.053000
Last modified
2026-10-26 21:10:00.170000
View original CVE JSON
{
"id": "CVE-2026-1496",
"sourceIdentifier": "[email protected]",
"published": "2026-03-27T15:16:48.053",
"lastModified": "2026-10-26T21:10:00.170",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Vulnerable versions of Coverity Connect lack an error handler in the authentication logic for command line tooling that makes it vulnerable to an authentication bypass. A malicious actor with access to the /token API endpoint that either knows or guesses a valid username, can use this in a specially crafted HTTP request to bypass authentication. Successful exploitation allows the malicious actor to assume all roles and privileges granted to the valid user’s Coverity Connect account."
},
{
"lang": "es",
"value": "Versiones vulnerables de Coverity Connect carecen de un gestor de errores en la lógica de autenticación para las herramientas de línea de comandos que la hace vulnerable a una omisión de autenticación. Un actor malicioso con acceso al endpoint de la API /token que conoce o adivina un nombre de usuario válido, puede usar esto en una solicitud HTTP especialmente diseñada para omitir la autenticación. La explotación exitosa permite al actor malicioso asumir todos los roles y privilegios concedidos a la cuenta de Coverity Connect del usuario válido."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Black Duck",
"product": "Coverity",
"defaultStatus": "unaffected",
"versions": [
{
"version": "2024.3.0",
"lessThan": "2025.12.0",
"versionType": "custom",
"status": "affected"
},
{
"version": "2024.3.0A",
"status": "unaffected"
},
{
"version": "2024.3.1A",
"status": "unaffected"
},
{
"version": "2024.3.2A",
"status": "unaffected"
},
{
"version": "2024.6.0A",
"status": "unaffected"
},
{
"version": "2024.6.1A",
"status": "unaffected"
},
{
"version": "2024.9.0A",
"status": "unaffected"
},
{
"version": "2024.9.1A",
"status": "unaffected"
},
{
"version": "2024.12.0A",
"status": "unaffected"
},
{
"version": "2024.12.1A",
"status": "unaffected"
},
{
"version": "2024.12.2",
"status": "unaffected"
},
{
"version": "2025.3.0A",
"status": "unaffected"
},
{
"version": "2025.3.1A",
"status": "unaffected"
},
{
"version": "2025.3.2",
"status": "unaffected"
},
{
"version": "2025.6.0A",
"status": "unaffected"
},
{
"version": "2025.6.2A",
"status": "unaffected"
},
{
"version": "2025.6.4",
"status": "unaffected"
},
{
"version": "2025.9.0A",
"status": "unaffected"
},
{
"version": "2025.9.2A",
"status": "unaffected"
},
{
"version": "2025.9.3",
"status": "unaffected"
},
{
"version": "2025.12.0A",
"status": "unaffected"
},
{
"version": "2025.12.1",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-03-27T14:35:08.919139Z",
"id": "CVE-2026-1496",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-639"
}
]
}
],
"references": [
{
"url": "https://community.blackduck.com/s/article/Black-Duck-Security-Advisory-CVE-2026-1496",
"source": "[email protected]"
},
{
"url": "https://community.blackduck.com/s/article/Instructions-on-how-to-block-token-endpoint-for-Coverity-Connect",
"source": "[email protected]"
},
{
"url": "https://community.blackduck.com/s/article/WAF-IDS-IPS-Mitigation-Guidance",
"source": "[email protected]"
},
{
"url": "https://github.com/blackduck-inc/Coverity-Usage-Log-Analyzer",
"source": "[email protected]"
}
]
}