Serial number: AV26-987
Date: October 2, 2026
As of October 1, 2026, Fortra is affected by a vulnerabilities in the following product:
- BoKS Manager boks-server
- Prior to 8.1.0.24
- Prior to 9.0.0.7
- BoKS Manager
- Prior to 8.1.0.24
- Prior to 9.0.0.7
- Core Privileged Access Manager (BoKS)
- Prior to 10.1.1.0
- Prior to 9.0.0.7
- Prior to 8.1.0.30
The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
- Heap overflow in KSL checksum initialization
- Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability
- Heap buffer overflow in boks_sshd revoked-key error handling
- Fortra BoKS Manager boks_portmux TLS ClientHello out-of-bounds read vulnerability
- Product Security Advisories | Fortra