BBlack Duck

Products

Exploited and recent CVEs

• CVE-2026-76055 High 7.5 Improper Neutralization of Special Elements used in an OS Command in the package manager component of Black Duck blackduck-c-cpp before 3.0.7 allows an actor able to create a file within the scanned b 0.2%
• CVE-2026-76054 High 7.1 Invocation of Process Using Visible Sensitive Information in Black Duck blackduck-c-cpp 1.0.17 through 3.0.6 allows an actor able to execute code within the scanned project's build to obtain the Black 0.2%
• CVE-2026-8338 Critical 9.2 Authentication and Authorization Bypass in Coverity Connect 0.5%
• CVE-2026-8339 High 8.7 SQL Injection in Coverity Connect SOAP API 0.3%
• CVE-2026-1496 Critical 9.3 Coverity CLI Authentication Bypass 0.5%
• CVE-2025-0504 Medium 5.4 Black Duck SCA Project Privilege Escalation 0.2%
• CVE-2024-12021 High 8.5 Stored Cross-Site Scripting 0.4%