What is GHSA-9cc8-j46r-gq7j?

GHSA-9cc8-j46r-gq7j is a security advisory published by GitHub Security Advisories with High severity. A SQL injection vulnerability exists in the Coverity Connect SOAP API for versions between 2024.6...

Which CVE IDs does GHSA-9cc8-j46r-gq7j cover?

GHSA-9cc8-j46r-gq7j covers the following CVE IDs: CVE-2026-8339. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-9cc8-j46r-gq7jHigh

A SQL injection vulnerability exists in the Coverity Connect SOAP API for versions between 2024.6...

Vendor

GitHub Security Advisories

Published

July 29, 2026

Last Modified

July 29, 2026

🔗 CVE IDs covered (1)

CVE-2026-8339 →

📋 Description

A SQL injection vulnerability exists in the Coverity Connect SOAP API for versions between 2024.6.0 and 2026.3.0 (inclusive). A malicious, authenticated threat actor who sends a specially crafted payload can achieve full read access to database contents and other unauthorized commands.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-8339
https://community.blackduck.com/s/article/Black-Duck-Product-Security-Advisory-CVE-2026-8339-SQL-Injection-Vulnerability-in-Coverity-Connect-SOAP-API
https://github.com/advisories/GHSA-9cc8-j46r-gq7j