Fortra S Core Privileged Access Manager Boks
Monthly
Unauthenticated remote attackers who can reach the boks_autoregisterd autoregistration service in Fortra's Core Privileged Access Manager (BoKS) can trigger a stack-based buffer overflow while the daemon processes a client response, potentially corrupting memory and achieving code execution under the daemon's privileges, as reflected by the maximum-severity CVSS 3.1 score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Affected deployments are those running the BoKS autoregistration/enrollment daemon on a network segment reachable by the attacker, which in most environments is the internal management or agent network rather than the public internet. No public exploit identified at time of analysis; the issue was reported to the vendor by Fortra, and the only reference provided is Fortra's product security advisory FI-2026-017, with no CISA KEV listing and no EPSS data supplied.
Unauthenticated remote attackers who can reach the boks_autoregisterd autoregistration service in Fortra's Core Privileged Access Manager (BoKS) can trigger a stack-based buffer overflow while the daemon processes a client response, potentially corrupting memory and achieving code execution under the daemon's privileges, as reflected by the maximum-severity CVSS 3.1 score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Affected deployments are those running the BoKS autoregistration/enrollment daemon on a network segment reachable by the attacker, which in most environments is the internal management or agent network rather than the public internet. No public exploit identified at time of analysis; the issue was reported to the vendor by Fortra, and the only reference provided is Fortra's product security advisory FI-2026-017, with no CISA KEV listing and no EPSS data supplied.