← All reports

Fortra BoKS products contain critical security vulnerabilities including predictable password generation and out-of-bounds read flaws.

CybersecurityTechnologyConflictOct 1, 2026score 0.182 posts · 0 replies across 1 instances
The thread reports on two specific security vulnerabilities identified in Fortra's Core Privileged Access Manager (BoKS) products. These vulnerabilities include a predictable password generation issue and an out-of-bounds read in the TLS ClientHello parser, posing risks to system security.

Claims

Fortra BoKS products contain critical security vulnerabilities including predictable password generation and out-of-bounds read flaws.
Parent: CybersecurityEntity: Fortra BoKSSub-entity: Core Privileged Access ManagerImpact: negativeDate: Oct 1, 2026Target: Fortra BoKS security

Source posts

@[email protected]
🚨 EUVD-2026-90889 📊 Score: 4.8/10 (CVSS v3.1) 📦 Product: Core Privileged Access Manager (BoKS), Core Privileged Access Manager (BoKS) 🏢 Vendor: Fortra 📅 Updated: 2026-10-01 📝 Fortra BoKS Server Agent contains a predictable password generation vulnerability in the adjoin utility. Machine-account passwords generated during Active Directory join or password renewal ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-90889 #cybersecurity #infosec #euvd #cve #vulnerability
0 boosts · 0 favs · 0 replies · Oct 1, 2026
#cybersecurity#infosec#euvd#cve#vulnerability
@[email protected]
🚨 EUVD-2026-90881 📊 Score: 7.5/10 (CVSS v3.1) 📦 Product: BoKS Manager, BoKS Manager 🏢 Vendor: Fortra 📅 Updated: 2026-10-01 📝 Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boks_portmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boks_portmux. Although the daemon... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-90881 #cybersecurity #infosec #euvd #cve #vulnerability
1 boosts · 0 favs · 0 replies · Oct 1, 2026
#cybersecurity#infosec#euvd#cve#vulnerability