Veille CVE

Recherche « Fortra Core Privileged Access Manager (BoKS) »

3 CVE

Critique 1 Élevée 1 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Fortra Core Privileged Access Manager (BoKS) » ✕
  1. CVE-2026-14316 8.1 Élevée

    Fortra Core Privileged Access Manager (BoKS)

    The revoked-key error path builds a human-readable failure reason using sprintf() into a heap buffer. The allocated buffer is too small for the final formatted message. When sprintf() writes the full message, it can write past the end of the heap allocation.

  2. CVE-2026-9864 4.8 Moyenne

    Fortra Core Privileged Access Manager (BoKS)

    Fortra BoKS Server Agent contains a predictable password generation vulnerability in the adjoin utility. Machine-account passwords generated during Active Directory join or password renewal operations may have significantly less entropy than intended, making them more susceptible to prediction by an attacker who can estimate when the password was generated.

  3. CVE-2026-12627 9.8 Critique

    Fortra's Core Privileged Access Manager (BoKS)

    Fortra's Core Privileged Access Manager (BoKS) contains a stack-based buffer overflow vulnerability in boks_autoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing.