← All reports

Fortra's BoKS Manager contains critical vulnerabilities that could allow remote attackers to execute arbitrary code or cause command injection.

CybersecurityEnterprise SecurityOct 1, 2026score 0.283 posts · 0 replies across 2 instances
This thread discusses multiple security vulnerabilities in Fortra's BoKS Manager and Core Privileged Access Manager, including buffer overflow, command injection, and insecure temporary file issues. These vulnerabilities highlight significant risks in enterprise security systems and the need for timely patches.

Claims

Fortra's BoKS Manager contains critical vulnerabilities that could allow remote attackers to execute arbitrary code or cause command injection.
Parent: CybersecurityEntity: Fortra's BoKS ManagerImpact: negativeDate: Oct 1, 2026Target: Fortra's BoKS Manager contains critical vulnerabilities that could allow remote attackers to execute arbitrary code or cause command injection.
Fortra's Core Privileged Access Manager has a stack-based buffer overflow vulnerability that could be exploited by remote attackers with network access.
Parent: CybersecurityEntity: Fortra's Core Privileged Access ManagerImpact: negativeDate: Oct 1, 2026Target: Fortra's Core Privileged Access Manager has a stack-based buffer overflow vulnerability that could be exploited by remote attackers with network access.

Source posts

@[email protected]
🚨 EUVD-2026-90882 📊 Score: 9.8/10 (CVSS v3.1) 📦 Product: Fortra's Core Privileged Access Manager (BoKS), Fortra's Core Privileged Access Manager (BoKS) 🏢 Vendor: Fortra 📅 Updated: 2026-10-01 📝 Fortra's Core Privileged Access Manager (BoKS) contains a stack-based buffer overflow vulnerability in boks_autoregisterd. A remote attacker with network access to the auto... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-90882 #cybersecurity #infosec #euvd #cve #vulnerability
1 boosts · 0 favs · 0 replies · Oct 1, 2026
#cybersecurity#infosec#euvd#cve#vulnerability
@[email protected]
🚨 EUVD-2026-90871 📊 Score: 7.9/10 (CVSS v3.1) 📦 Product: BoKS Manager, BoKS Manager 🏢 Vendor: Fortra 📅 Updated: 2026-10-01 📝 Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable temporary files without first setting a restrictive umask. A local user on the BoKS Master who can read files under BOK... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-90871 #cybersecurity #infosec #euvd #cve #vulnerability
0 boosts · 0 favs · 0 replies · Oct 1, 2026
#cybersecurity#infosec#euvd#cve#vulnerability
@[email protected]
🚨 EUVD-2026-90875 📊 Score: 9.1/10 (CVSS v3.1) 📦 Product: BoKS Manager, BoKS Manager 🏢 Vendor: Fortra 📅 Updated: 2026-10-01 📝 Fortra BoKS Manager contains a command injection vulnerability in crlserver. An authenticated user authorized to add CRL URLs through BCC, the WSI REST or SOAP API, or the cacrl command-line interface could cause shell command substitution ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-90875 #cybersecurity #infosec #euvd #cve #vulnerability
0 boosts · 0 favs · 0 replies · Oct 1, 2026
#cybersecurity#infosec#euvd#cve#vulnerability