Veille CVE

Recherche « Fortra core privileged access manager server »

3 CVE

Critique 1 Élevée 1 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Fortra core privileged access manager server » ✕
  1. CVE-2026-9864 4.8 Moyenne

    Fortra Core Privileged Access Manager (BoKS)

    Fortra BoKS Server Agent contains a predictable password generation vulnerability in the adjoin utility. Machine-account passwords generated during Active Directory join or password renewal operations may have significantly less entropy than intended, making them more susceptible to prediction by an attacker who can estimate when the password was generated.

  2. CVE-2026-9863 8.8 Élevée

    Fortra Core Privileged Access Manager (BoKS) · Fortra core privileged access manager server

    Fortra BoKS Manager contains an OS command injection vulnerability in the client upgrade and patch tooling for legacy tar-based client installations. A malicious or compromised legacy tar-installed client selected for upgrade or patching may be able to cause commands to be executed on the BoKS Master during client version handling.

  3. CVE-2026-9862 9.8 Critique

    Fortra Core Privileged Access Manager (BoKS) · Fortra core privileged access manager server

    Fortra's  Core Privileged Access Manager (BoKS) contains an OS command injection vulnerability in the boks_autoregisterd service. A remote attacker with network access to the service may be able to cause commands to be executed with the privileges of the service during the autoregistration processing.