Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-12627

Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability

Description

Fortra's Core Privileged Access Manager (BoKS) contains a stack-based buffer overflow vulnerability in boks_autoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fortra Fortra's Core Privileged Access Manager (BoKS)

Default version status: unaffected

  • 8.1.0.0 to ≤ 8.1.0.23affected
  • 9.0.0.0 to ≤ 9.0.0.6affected

References