Vendors / Cobbr Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 0
Exploited now Cobbr records in CISA KEV No Cobbr vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 81
Covenant through 0.6 registers the CovenantHub SignalR hub without an Authorize attribute, allowing unauthenticated callers to invoke CreateHttpListener and receive a signed JWT token.
CVSS 4.0 CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00495 · Published 2026-09-16 · No fix listed CWE-306
Priority HIGH 81
Covenant 0.1.3 - 0.5 contains a remote code execution vulnerability that allows attackers to craft malicious JWT tokens with administrative privileges.
CVSS 4.0 CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.12334 · Published 2026-01-13 · No fix listed CWE-798
Open these records in search → All records by CVSS severity
2 0 0 0 0
