CVE-2026-61729

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76, verifygraylogheader in backend/app/activeresponse/routes/graylog.py and verifyvelociraptorheader in backend/app/incidents/routes/incidentalert.py authenticate webhooks against...

CVE-2026-61729

SOCFortress CoPilot versions prior to 0.1.76 are vulnerable to unauthenticated active-response invocation and alert injection due to a hardcoded default header secret . The functions verify_graylog_header and verify_velociraptor_header use a publicly known fallback value shipped in .env.example i...