Unrated severityNVD Advisory· Published Jul 29, 2026· Updated Jul 29, 2026

SQL Injection in Coverity Connect SOAP API

CVE-2026-8339

Description

A SQL injection vulnerability exists in the Coverity Connect SOAP API for versions between 2024.6.0 and 2026.3.0 (inclusive). A malicious, authenticated threat actor who sends a specially crafted payload can achieve full read access to database contents and other unauthorized commands.

Affected products

Coverity/Connectllm-create
Range: 2024.6.0 - 2026.3.0
Black Duck/Coverityllm-fuzzy
Range: 2024.6.0 - 2026.3.0

Patches

Vulnerability mechanics

References

community.blackduck.com/s/article/Black-Duck-Product-Security-Advisory-CVE-2026-8339-SQL-Injection-Vulnerability-in-Coverity-Connect-SOAP-APImitrevendor-advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000