Vulnerabilidades do Fortra Core Privileged Access Manager Server

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Fortra Core Privileged Access Manager Server: 2 registro(s), com versões afetadas e correções.
cpe:2.3:a:fortra:core_privileged_access_manager_server

CVE-2026-9863 Alta · 8.8 CWE-78 15/06/2026

Core Privileged Access Manager (BoKS) upgrade tooling command injection vulnerability

Fortra BoKS Manager contains an OS command injection vulnerability in the client upgrade and patch tooling for legacy tar-based client installations. A malicious or compromised legacy tar-installed client selected for upgrade or patching may be able to cause commands to be executed on the BoKS Master during client version handling.

CVE-2026-9862 Crítica · 9.8 CWE-78 15/06/2026

Core Privileged Access Manager (BoKS) autoregistration service command injection vulnerability

Fortra's Core Privileged Access Manager (BoKS) contains an OS command injection vulnerability in the boks_autoregisterd service. A remote attacker with network access to the service may be able to cause commands to be executed with the privileges of the service during the autoregistration processing.