Vendor
Fortra
- CVEs tracked · all time
- 5
- in CISA KEV · all time
- 1
- article · since 11 Sep
- 1
- articles · all time
- 4
One article in the last 45 daysThe latest: SecurityWeek, Sat 3 Oct, 11:46 UTC.See the full timeline
Products: BoKS Manager, BoKS Manager boks-server, Core Privileged Access Manager (BoKS), Fortra's Core Privileged Access Manager (BoKS) and 1 more
BoKS ManagerBoKS Manager boks-serverCore Privileged Access Manager (BoKS)Fortra's Core Privileged Access Manager (BoKS)GoAnywhere MFT
CVEs
5 CVEsCVE-2025-10035Fortra GoAnywhere MFT Deserialization of Untrusted Data VulnerabilityCVSS10.0CriticalExploited99.7%EPSS2articles
CVE-2026-79901Fortra BoKS Manager boks-server vulnerabilityCVSS9.9Critical–Not in KEV0.3%EPSS1article
CVE-2026-12627Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerabilityCVSS9.8Critical–Not in KEV0.4%EPSS1article
CVE-2026-79898Fortra BoKS Manager crlserver command injection vulnerabilityCVSS9.1Critical–Not in KEV1.0%EPSS1article
CVE-2026-9862Core Privileged Access Manager (BoKS) autoregistration service command injection vulnerabilityCVSS9.8Critical–Not in KEV1.5%EPSS1article
- Fortra Patches Critical BoKS Flaw Enabling AD Password CrackingSecurityWeek
- Attackers hijack Fortra BoKS servers via CVE-2026-9862 flawSecurityOnline
- Storm-1175 Deploys Medusa Ransomware at 'High Velocity'Dark Reading
- Storm-1175 Exploits Flaws in High-Velocity Medusa AttacksInfosecurity · first in our coverage