socfortress CoPilot
8 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-61739 | < 0.1.77 | SOCFortress CoPilot: Authentication Bypass and Missing Authorization on Velociraptor Sigma Exclusion Rules (Detection Suppression) | HIGH 7.5 | 0.4 % | ||
| CVE-2026-61738 | < 0.1.77 | SOCFortress CoPilot: Arbitrary Host File Write as Root via Path Traversal in the ScoutSuite GCP Report Upload (RCE) | CRITICAL 10.0 | 0.6 % | ||
| CVE-2026-61730 | < 0.1.77 | SOCFortress CoPilot: Unauthenticated Exposure of ScoutSuite Reports and Uploaded GCP Service-Account Key via Static Mount | CRITICAL 9.3 | 0.4 % | ||
| CVE-2026-61729 | < 0.1.76 | SOCFortress CoPilot: Hardcoded Default Header Secret - Unauthenticated Active-Response Invocation and Alert Injection | CRITICAL 9.4 | 0.4 % | ||
| CVE-2026-61728 | < 0.1.76 | SOCFortress CoPilot: Stored comment and SOC-field XSS permits privileged account takeover | CRITICAL 9.9 | 0.5 % | ||
| CVE-2026-61708 | < 0.1.76 | SOCFortress CoPilot: Cross-Tenant Arbitrary Object-Store Write via the Data-Store Upload Endpoint (customer_user) | HIGH 8.5 | 0.4 % | ||
| CVE-2026-61707 | < 0.1.76 | SOCFortress CoPilot: Stored case-report template injection permits backend code execution | CRITICAL 9.0 | 0.2 % | ||
| CVE-2026-42869 | < 0.1.57 | SOCFortress CoPilot: Hardcoded JWT secret allows unauthenticated full admin compromise and lateral movement into all integrated SOC tools | CRITICAL 10.0 | 0.6 % |