Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-12627 EUVD-2026-90882GHSA-q8pc-64j3-359r

Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability

Published Oct 1, 2026 · Updated Oct 1, 2026 · Assigned by Fortra

Description

Fortra's Core Privileged Access Manager (BoKS) contains a stack-based buffer overflow vulnerability in boks_autoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing.

Affected products

VendorProductAffectedFixed
Fortra Fortra's Core Privileged Access Manager (BoKS) 8.1.0.0 – ≤ 8.1.0.23, 9.0.0.0 – ≤ 9.0.0.6 —

References