{"id":"CVE-2026-9864","state":"PUBLISHED","title":"Fortra BoKS Server Agent adjoin machine-account password generation vulnerability","description":"Fortra BoKS Server Agent contains a predictable password generation vulnerability in the adjoin utility. Machine-account passwords generated during Active Directory join or password renewal operations may have significantly less entropy than intended, making them more susceptible to prediction by an attacker who can estimate when the password was generated.","publishedAt":"2026-10-01T16:00:25.899Z","updatedAt":"2026-10-01T16:16:15.483Z","severity":{"score":4.8,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","source":"Fortra"},"assigner":"Fortra","products":["Fortra Core Privileged Access Manager (BoKS)"],"affected":[{"vendor":"Fortra","product":"Core Privileged Access Manager (BoKS)","defaultStatus":"unknown","versions":[{"version":"8.1.0.0","status":"affected","lessThanOrEqual":"8.1.0.29","versionType":"custom"},{"version":"9.0.0.0","status":"affected","lessThanOrEqual":"9.0.0.5","versionType":"custom"}],"modules":["adjoin"]}],"references":["https://www.fortra.com/security/advisories/product-security/fi-2026-018"],"weaknesses":["CWE-338"],"ingestedAt":"2026-10-29T20:13:52.441Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/9xxx/CVE-2026-9864.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-9864","state":"PUBLISHED","datePublished":"2026-10-01T16:00:25.899Z","dateUpdated":"2026-10-01T16:16:15.483Z","assignerShortName":"Fortra","assignerOrgId":"df4dee71-de3a-4139-9588-11b62fe6c0ff","dateReserved":"2026-05-28T16:37:54.270Z"},"containers":{"cna":{"title":"Fortra BoKS Server Agent adjoin machine-account password generation vulnerability","descriptions":[{"lang":"en","value":"Fortra BoKS Server Agent contains a predictable password generation vulnerability in the adjoin utility. Machine-account passwords generated during Active Directory join or password renewal operations may have significantly less entropy than intended, making them more susceptible to prediction by an attacker who can estimate when the password was generated."}],"affected":[{"vendor":"Fortra","product":"Core Privileged Access Manager (BoKS)","defaultStatus":"unknown","versions":[{"version":"8.1.0.0","status":"affected","lessThanOrEqual":"8.1.0.29","versionType":"custom"},{"version":"9.0.0.0","status":"affected","lessThanOrEqual":"9.0.0.5","versionType":"custom"}],"modules":["adjoin"]}],"references":[{"url":"https://www.fortra.com/security/advisories/product-security/fi-2026-018"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseSeverity":"MEDIUM","baseScore":4.8,"vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-338","lang":"en","description":"CWE-338 Use of cryptographically weak Pseudo-Random number generator (PRNG)","type":"CWE"}]}],"providerMetadata":{"shortName":"Fortra","orgId":"df4dee71-de3a-4139-9588-11b62fe6c0ff","dateUpdated":"2026-10-01T16:00:25.899Z"},"impacts":[{"capecId":"CAPEC-49","descriptions":[{"lang":"en","value":"CAPEC-49 Password Brute Forcing"}]}],"workarounds":[{"lang":"en","value":"Until fixed builds are deployed, avoid running adjoin join or autoupdate operations from affected versions. If automatic machine-account password renewal is enabled, disable it temporarily or ensure renewed passwords are rotated again after upgrading to a fixed version.","supportingMedia":[{"type":"text/html","base64":false,"value":"Until fixed builds are deployed, avoid running adjoin join or autoupdate operations from affected versions. If automatic machine-account password renewal is enabled, disable it temporarily or ensure renewed passwords are rotated again after upgrading to a fixed version."}]}],"solutions":[{"lang":"en","value":"Upgrade to a fixed boks-client release newer than 8.1.0.29 or 9.0.0.5, then rotate machine-account passwords generated by affected versions.","supportingMedia":[{"type":"text/html","base64":false,"value":"Upgrade to a fixed boks-client release newer than 8.1.0.29 or 9.0.0.5, then rotate machine-account passwords generated by affected versions."}]}],"source":{"discovery":"INTERNAL"},"x_generator":{"engine":"Vulnogram 1.0.5"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-10-01T16:16:03.897430Z","id":"CVE-2026-9864","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-10-01T16:16:15.483Z"}}]}}}