SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs.
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76, `verify_graylog_header` in `backend/app/active_response/routes/graylog.py` and `verify_velociraptor_header` in `backend/app/incidents/routes/incident_alert.py` authenticate webhooks against `GRAYLOG_API_HEADER_VALUE` and `VELOCIRAPTOR_API_HEADER_VALUE` with the same publicly hardcoded fallback. The same default is shipped in `.env.example`. Deployments that leave either setting unset or unchanged permit an anonymous caller with the known header value to bypass the JWT authentication required by normal APIs. `POST /api/graylog/invoke` forwards attacker-selected `COMMAND`, `
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Socfortress
- Product
- CoPilot
- CVSS v3.1
- 9.4 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
- EPSS
- 0.004 (p32)
- Fix
- available
- Weakness
- CWE-306, CWE-798
- Exposure class
- Endpoint security
- NVD status
- Received
Why it ranks 34 (Notable)
- CVSS v3.1 9.4 critical
- Product class: endpoint security
- Fix available
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-61729 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.