Vulnerabilities in socfortress
8 resultsCVE-2026-42869CRITICALSOCFortress CoPilot: Hardcoded JWT secret allows unauthenticated full admin compromise and lateral movement into all integrated SOC toolsEPSS 0.6%CVE-2026-61738CRITICALSOCFortress CoPilot: Arbitrary Host File Write as Root via Path Traversal in the ScoutSuite GCP Report Upload (RCE)EPSS 0.6%CVE-2026-61728CRITICALSOCFortress CoPilot: Stored comment and SOC-field XSS permits privileged account takeoverEPSS 0.5%CVE-2026-61708HIGHSOCFortress CoPilot: Cross-Tenant Arbitrary Object-Store Write via the Data-Store Upload Endpoint (customer_user)EPSS 0.4%CVE-2026-61729CRITICALSOCFortress CoPilot: Hardcoded Default Header Secret - Unauthenticated Active-Response Invocation and Alert InjectionEPSS 0.4%CVE-2026-61739HIGHSOCFortress CoPilot: Authentication Bypass and Missing Authorization on Velociraptor Sigma Exclusion Rules (Detection Suppression)EPSS 0.4%CVE-2026-61730CRITICALSOCFortress CoPilot: Unauthenticated Exposure of ScoutSuite Reports and Uploaded GCP Service-Account Key via Static MountEPSS 0.4%CVE-2026-61707CRITICALSOCFortress CoPilot: Stored case-report template injection permits backend code executionEPSS 0.2%