Fortra Patches Critical Vulnerabilities in BoKS
Fortra patched eight BoKS flaws, including three critical bugs enabling authentication bypass and command execution.
Fortra patched eight vulnerabilities in Core Privileged Access Manager (BoKS), used to manage Unix and Linux access. CVE-2026-79901 (CVSS 9.9) allows authentication bypass because Active Directory service-account passwords are generated from a predictable pseudo-random sequence seeded with the Unix timestamp. CVE-2026-79898 (CVSS 9.1) is a command injection in crlserver that an authenticated user can reach through BCC or the WSI API to run commands as root on the BoKS Master. CVE-2026-12627 (CVSS 9.8) is a stack buffer overflow in autoregistration. Fortra also fixed five high- and medium-severity issues and did not report exploitation in the wild.
- CVE-2026-79901 (CVSS 9.9) bypasses BoKS Active Directory service-account authentication.
- Passwords come from a timestamp-seeded predictable pseudo-random sequence.
- CVE-2026-79898 lets an authenticated user inject root commands via BCC or WSI.
- CVE-2026-12627 is a remote stack overflow in autoregistration, CVSS 9.8.
- Fortra reports no evidence these BoKS flaws are being exploited.
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-12627 | Stack buffer overflow in Fortra BoKS autoregisterd | 9.8 | — | ||
| CVE-2026-79898 | Authenticated Root Command Injection in Fortra BoKS Manager crlserver | 9.1 | — | ||
| CVE-2026-79901 | Predictable Timestamp-Seeded Passwords in Fortra BoKS ServerControl boks_keytabmd | 9.9 | — |
From the original article
2 min read at securityweek.com
The bugs could lead to authentication bypass, shell command execution, and memory corruption. The post Fortra Patches Critical Vulnerabilities in BoKS appeared first on SecurityWeek.
By Ionut Arghire · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.