Vulnerability intelligence

CVE-2026-12627

Fortra Fortra's Core Privileged Access Manager (BoKS) CWE-121

Fortra's Core Privileged Access Manager (BoKS) contains a stack-based buffer overflow vulnerability in boks_autoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing.

CVSS Score

9.8

Critical

EPSS — Exploit Probability

0.4%

Riskier than 36% of all CVEs · checked 2026-10-03

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

unknown

Check vendor advisories