Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A Spring Security authentication and authorization bypass exists in Coverity Connect versions between 2023.6.0 and 2026.3.0. An unauthenticated malicious threat actor that can send a specially crafted HTTP request is able to bypass authentication and authorization controls on certain API endpoints to access data within Coverity.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-07-29 | 2 | Disclosure2 |
| 2026-09-06 | 1 | General1 |
CVE-2026-8338: Coverity Connect Authentication and Authorization Bypass - What It Means for Your Business and How to Respond https://hubs.li/Q04wP_4G0
Post summary
The headline discusses CVE-2026-8338 as an authentication and authorization bypass, but it offers no proof of concept, exploit details, patch information, or evidence of active exploitation.
CVE-2026-8338 A Spring Security authentication and authorization bypass exists in Coverity Connect versions between 2023.6.0 and 2026.3.0. An unauthenticated malicious threat actor t… https://www.cve.org/CVERecord?id=CVE-2026-8338
Post summary
The tweet reveals a Spring Security authentication/authorization bypass (CVE-2026-8338) affecting specific Coverity Connect releases, without providing PoC, exploit code, or evidence of active exploitation.
CVE-2026-8338 Authentication and Authorization Bypass in Coverity Connect 2023.6... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8338 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
The post announces an authentication and authorization bypass vulnerability in Coverity Connect 2023.6, linking to details but providing no evidence of exploitation or patches.