← Database

CVE-2026-9862

CRITICAL CVSS: 9.8 Published: 2026-06-15 Modified: 2026-07-28

Description

Fortra's  Core Privileged Access Manager (BoKS) contains an OS command injection vulnerability in the boks_autoregisterd service. A remote attacker with network access to the service may be able to cause commands to be executed with the privileges of the service during the autoregistration processing.

Affected Platforms

Fortra Core Privileged Access Manager Server

Weakness Type

CWE-78

References