CVE-2026-9862

9.8 Critique

Publiée le 15/06/2026 à 18:16 · Modifiée le 28/07/2026 à 15:20 · Analysée par le NVD · Source : df4dee71-de3a-4139-9588-11b62fe6c0ff

Description

Fortra's Core Privileged Access Manager (BoKS) contains an OS command injection vulnerability in the boks_autoregisterd service. A remote attacker with network access to the service may be able to cause commands to be executed with the privileges of the service during the autoregistration processing.

Traduire en français

Produits concernés

Fortra Core Privileged Access Manager (BoKS)
Fortra core privileged access manager server

Scores CVSS

Version	Score	Source	Vecteur
3.1	9.8 Critique	df4dee71-de3a-4139-9588-11b62fe6c0ff	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-78

Références

https://www.fortra.com/security/advisories/product-security/fi-2026-007 Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories