CVE-2026-9863

8.8 Élevée

Publiée le 15/06/2026 à 18:16 · Modifiée le 28/07/2026 à 15:21 · Analysée par le NVD · Source : df4dee71-de3a-4139-9588-11b62fe6c0ff

Description

Fortra BoKS Manager contains an OS command injection vulnerability in the client upgrade and patch tooling for legacy tar-based client installations. A malicious or compromised legacy tar-installed client selected for upgrade or patching may be able to cause commands to be executed on the BoKS Master during client version handling.

Traduire en français

Produits concernés

Fortra Core Privileged Access Manager (BoKS)
Fortra core privileged access manager server

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.5 Élevée	df4dee71-de3a-4139-9588-11b62fe6c0ff	`CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H`
3.1	8.8 Élevée	nvd@nist.gov (NVD)	`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-78

Références

https://www.fortra.com/security/advisories/product-security/fi-2026-008 Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories