PT-2026-132849

Name of the Vulnerable Software and Affected Versions SOCFortress CoPilot versions prior to 0.1.76 Description Low-privilege users with the customer user role can upload malicious case-report templates via the /case-report-template/upload endpoint. The system only validates the filename-derived...

CVE-2026-61707: socfortress CoPilot: SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76, in the reported deployment, case-report templates uploaded by customeruser, the lowest-privilege portal role, are later executed by non-sandboxed Jinja2 engines when an admin o...