CVE-2026-8339 — SQL Injection in Coverity Connect SOAP API
A SQL injection vulnerability exists in the Coverity Connect SOAP API for versions between 2024.6.0 and 2026.3.0 (inclusive). A malicious, authenticated threat actor who sends a…
Published: 2026-07-29 · CVSS: 8.7 · CVSS 4.0
A SQL injection vulnerability exists in the Coverity Connect SOAP API for versions between 2024.6.0 and 2026.3.0 (inclusive). A malicious, authenticated threat actor who sends a specially crafted payload can achieve full read access to database contents and other unauthorized commands.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7