IT SBIT Services
Schneeberger
DEEN
CVE tracker

New vulnerabilities – clearly explained

Every newly published security vulnerability (CVE), continuously from the NVD, with the actively exploited ones from CISA and the probability of exploitation (EPSS) – each one researched individually: what is affected, what helps, what to do.

423published today
3238in the last 7 days
225of them critical
10newly exploited (7 days)

2 vulnerabilities · Vendor: SOCFortress

CVE-2026-61738Critical 10.0

SOCFortress CoPilot: Arbitrary file write via path traversal in ScoutSuite upload

SOCFortress CoPilot before 0.1.77 passes the uploaded filename of the ScoutSuite GCP report route to the file writer without sanitization. An authenticated admin or analyst can use path traversal in the filename to write the uploaded JSON content outside the report directory. The backend runs as root, so host files can be overwritten and operation disrupted; the demonstrated impact does not establish direct code execution, although the advisory is titled RCE. The CNA and NVD rate the CVE 10.0 (CVSS 3.1), while VulDB rates it 9.9.

SOCFortress · CoPilot

CVE-2026-61728Critical 9.9

SOCFortress CoPilot: Stored XSS in alert comments and SOC fields

SOCFortress CoPilot renders user-submitted alert comments and SOC case, asset and health-check fields as raw HTML in the portal. A portal user, including a customer_user, can store script code that runs in the browser of another user who views the affected item, such as an analyst or administrator. According to the CVE description, stolen tokens could enable account takeover and cross-tenant access; this token part is not confirmed by the commit excerpts. The CNA rates the issue CVSS 3.1 9.9 (Critical).

SOCFortress · CoPilot

Affected? We can help.

We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.

Get in touchRSS feed

Data: NVD (NIST), CISA KEV, FIRST EPSS – updated continuously.