Fortra security advisory (AV26-987)
Canada's Cyber Centre urges patches for heap and stack overflows in Fortra BoKS Manager.
On October 1, 2026, the Canadian Centre for Cyber Security issued advisory AV26-987 about vulnerabilities in Fortra BoKS Manager boks-server versions before 8.1.0.24 and 9.0.0.7. Fortra's notices describe a heap overflow in KSL checksum initialization and a stack buffer overflow in the Core Privileged Access Manager autoregistration component. The Cyber Centre urges administrators to review Fortra's advisories and apply updates. The bulletin does not cite CVE identifiers or say the flaws are being exploited.
- Advisory AV26-987 covers Fortra BoKS Manager boks-server.
- Affected releases are before 8.1.0.24 and before 9.0.0.7.
- Flaws include a KSL checksum heap overflow and an autoregistration stack overflow.
- No active exploitation is mentioned in the notice.
- Vendors
- Fortra
- Organizations
- Canadian Centre for Cyber SecurityFortra
- Countries
- Canada
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-987 Date: October 1, 2026 As of October 1, 2026, Fortra is affected by a vulnerabilities in the following product: BoKS Manager boks-server Prior to 8. 1. 0.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.