socfortress vulnerabilities

Newest CVEs

• CVE-2026-61739

  SOCFortress CoPilot: Authentication Bypass and Missing Authorization on Velociraptor Sigma Exclusion Rules (Detection Suppression)

  socfortress · CoPilot

  High7.5
• CVE-2026-61738

  SOCFortress CoPilot: Arbitrary Host File Write as Root via Path Traversal in the ScoutSuite GCP Report Upload (RCE)

  socfortress · CoPilot

  Critical10.0
• CVE-2026-61730

  SOCFortress CoPilot: Unauthenticated Exposure of ScoutSuite Reports and Uploaded GCP Service-Account Key via Static Mount

  socfortress · CoPilot

  Critical9.3
• CVE-2026-61729

  SOCFortress CoPilot: Hardcoded Default Header Secret - Unauthenticated Active-Response Invocation and Alert Injection

  socfortress · CoPilot

  Critical9.4
• CVE-2026-61728

  SOCFortress CoPilot: Stored comment and SOC-field XSS permits privileged account takeover

  socfortress · CoPilot

  Critical9.9
• CVE-2026-61708

  SOCFortress CoPilot: Cross-Tenant Arbitrary Object-Store Write via the Data-Store Upload Endpoint (customer_user)

  socfortress · CoPilot

  High8.5
• CVE-2026-61707

  SOCFortress CoPilot: Stored case-report template injection permits backend code execution

  socfortress · CoPilot

  Critical9.0
• CVE-2026-42869

  SOCFortress CoPilot: Hardcoded JWT secret allows unauthenticated full admin compromise and lateral movement into all integrated SOC tools

  socfortress · CoPilot

  Critical10.0