Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:covenant:covenant:*:*:*:*:*:*:*:*

1 brief RSS
critical advisory

CVE-2026-92717 Authentication Bypass in Covenant

Covenant versions 0.6 and earlier contain an authentication bypass vulnerability allowing unauthenticated remote actors to gain full operator API access via the CovenantHub SignalR hub.

Covenant authentication-bypass c2-infrastructure cve-2026-92717
1t 1c