CVE-2026-98629.8CriticalCWE-78
Core Privileged Access Manager (BoKS) autoregistration service command injection vulnerability
Fortra · Core Privileged Access Manager (BoKS)
Not in CISA KEVVendor fix available
1.0%probability of exploitation in the next 30 days
62nd percentile
050100
Higher than 62% of scored CVEs
9.8CriticalCVSS 3.1
LowMediumHighCrit.
DescriptionNVD
Fortra's Core Privileged Access Manager (BoKS) contains an OS command injection vulnerability in the boks_autoregisterd service. A remote attacker with network access to the service may be able to cause commands to be executed with the privileges of the service during the autoregistration processing.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 17 Jun.
- Attackers hijack Fortra BoKS servers via CVE-2026-9862 flawSecurityOnline · first in our coverage
New articles also arrive in the RSS feed.