socfortress

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

socfortress records in CISA KEV

No socfortress vulnerabilities are listed in CISA KEV.

Records

8 records

TI-2026-83110 CVE-2026-61738

Path traversal in SOCFortress CoPilot lets attackers write host files

HIGH 82

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00558 Published 2026-10-30 Fixed in 0.1.77 CWE-22

TI-2026-31075 CVE-2026-42869

Improper authentication in socfortress CoPilot

HIGH 82

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00563 Published 2026-05-11 Fixed in 0.1.57 CWE-287

TI-2026-83107 CVE-2026-61729

Hardcoded default secret in SOCFortress CoPilot allows auth bypass

HIGH 80

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.00376 Published 2026-10-30 Fixed in 0.1.76 CWE-306

TI-2026-83106 CVE-2026-61728

SOCFortress CoPilot stored XSS enables privileged account takeover

HIGH 76

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00459 Published 2026-10-30 Fixed in 0.1.76 CWE-79

TI-2026-83146 CVE-2026-61739

Authentication bypass in SOCFortress CoPilot Sigma exclusions

HIGH 72

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00374 Published 2026-10-30 Fixed in 0.1.77 CWE-287

TI-2026-83108 CVE-2026-61730

SOCFortress CoPilot exposes ScoutSuite reports and GCP keys

MEDIUM 46

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00369 Published 2026-10-30 Fixed in 0.1.77 CWE-200

TI-2026-82778 CVE-2026-61707

Stored template injection in SOCFortress CoPilot allows backend code execution

MEDIUM 40

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00235 Published 2026-10-29 Fixed in 0.1.76 CWE-1336

TI-2026-83105 CVE-2026-61708

Cross-tenant object-store write in SOCFortress CoPilot upload endpoint

LOW 37

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00397 Published 2026-10-30 Fixed in 0.1.76 CWE-284

Open these records in search →