socfortress CoPilot
8 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-61739 | < 0.1.77 | SOCFortress CoPilot: Authentication Bypass and Missing Authorization on Velociraptor Sigma Exclusion Rules (Detection Suppression) | HIGH 7.5 | |||
| CVE-2026-61738 | < 0.1.77 | SOCFortress CoPilot: Arbitrary Host File Write as Root via Path Traversal in the ScoutSuite GCP Report Upload (RCE) | CRITICAL 10.0 | |||
| CVE-2026-61730 | < 0.1.77 | SOCFortress CoPilot: Unauthenticated Exposure of ScoutSuite Reports and Uploaded GCP Service-Account Key via Static Mount | CRITICAL 9.3 | |||
| CVE-2026-61729 | < 0.1.76 | SOCFortress CoPilot: Hardcoded Default Header Secret - Unauthenticated Active-Response Invocation and Alert Injection | CRITICAL 9.4 | |||
| CVE-2026-61728 | < 0.1.76 | SOCFortress CoPilot: Stored comment and SOC-field XSS permits privileged account takeover | CRITICAL 9.9 | |||
| CVE-2026-61708 | < 0.1.76 | SOCFortress CoPilot: Cross-Tenant Arbitrary Object-Store Write via the Data-Store Upload Endpoint (customer_user) | HIGH 8.5 | |||
| CVE-2026-61707 | < 0.1.76 | SOCFortress CoPilot: Stored case-report template injection permits backend code execution | CRITICAL 9.0 | 0.2 % | ||
| CVE-2026-42869 | < 0.1.57 | SOCFortress CoPilot: Hardcoded JWT secret allows unauthenticated full admin compromise and lateral movement into all integrated SOC tools | CRITICAL 10.0 | 0.6 % |