socfortress CoPilot

• CVE-2026-61739 High 7.5 SOCFortress CoPilot: Authentication Bypass and Missing Authorization on Velociraptor Sigma Exclusion Rules (Detection Suppression) 0.4%
• CVE-2026-61738 Critical 10.0 SOCFortress CoPilot: Arbitrary Host File Write as Root via Path Traversal in the ScoutSuite GCP Report Upload (RCE) 0.6%
• CVE-2026-61730 Critical 9.3 SOCFortress CoPilot: Unauthenticated Exposure of ScoutSuite Reports and Uploaded GCP Service-Account Key via Static Mount 0.4%
• CVE-2026-61729 Critical 9.4 SOCFortress CoPilot: Hardcoded Default Header Secret - Unauthenticated Active-Response Invocation and Alert Injection 0.4%
• CVE-2026-61728 Critical 9.9 SOCFortress CoPilot: Stored comment and SOC-field XSS permits privileged account takeover 0.5%
• CVE-2026-61708 High 8.5 SOCFortress CoPilot: Cross-Tenant Arbitrary Object-Store Write via the Data-Store Upload Endpoint (customer_user) 0.4%
• CVE-2026-61707 Critical 9.0 SOCFortress CoPilot: Stored case-report template injection permits backend code execution 0.2%
• CVE-2026-42869 Critical 10.0 SOCFortress CoPilot: Hardcoded JWT secret allows unauthenticated full admin compromise and lateral movement into all integrated SOC tools 0.6%