What’s Vulnerable › Products

socfortress CoPilot vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your socfortress CoPilot version is affected

Latest socfortress CoPilot vulnerabilities

• CVE-2026-61739 — SOCFortress CoPilot: Authentication Bypass and Missing Authorization on Velociraptor Sigma Exclusion Rules (Detection Suppression) (CVSS 7.5)
• CVE-2026-61738 — SOCFortress CoPilot: Arbitrary Host File Write as Root via Path Traversal in the ScoutSuite GCP Report Upload (RCE) (CVSS 10.0)
• CVE-2026-61730 — SOCFortress CoPilot: Unauthenticated Exposure of ScoutSuite Reports and Uploaded GCP Service-Account Key via Static Mount (CVSS 9.3)
• CVE-2026-61729 — SOCFortress CoPilot: Hardcoded Default Header Secret - Unauthenticated Active-Response Invocation and Alert Injection (CVSS 9.4)
• CVE-2026-61728 — SOCFortress CoPilot: Stored comment and SOC-field XSS permits privileged account takeover (CVSS 9.9)
• CVE-2026-61708 — SOCFortress CoPilot: Cross-Tenant Arbitrary Object-Store Write via the Data-Store Upload Endpoint (customer_user) (CVSS 8.5)
• CVE-2026-61707 — SOCFortress CoPilot: Stored case-report template injection permits backend code execution (CVSS 9.0)
• CVE-2026-42869 — SOCFortress CoPilot: Hardcoded JWT secret allows unauthenticated full admin compromise and lateral movement into all integrated SOC tools (CVSS 10.0)