CVE-2026-12627

Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability

State: Published
Severity: 9.8 Critical
Published: Oct 1, 2026
Updated: Oct 1, 2026
Reserved: Jun 18, 2026

Description

Fortra's Core Privileged Access Manager (BoKS) contains a stack-based buffer overflow vulnerability in boks_autoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Fortra

Weaknesses

CWE-121 Stack-based buffer overflow

Affected Products

Product	Versions
Fortra's Core Privileged Access Manager (BoKS)Fortra	8.1.0.0 through 8.1.0.23Affected 9.0.0.0 through 9.0.0.6Affected

References

https://www.fortra.com/security/advisories/product-security/fi-2026-017

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.