A vulnerability was found in Black Duck Coverity up to 2024.12.1/2025.3.1/2025.6.3/2025.9.2/2025.12.0. It has been declared as critical. This impacts an unknown function of the file /token of the component API Endpoint. Such manipulation leads to authorization bypass.
This vulnerability is uniquely identified as CVE-2026-1496. The attack can be launched remotely. No exploit exists.
It is recommended to upgrade the affected component.
