CVE-2026-12627 — Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability

CVE-2026-12627

Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability PUBLISHED

Description (CNA)

Fortra's Core Privileged Access Manager (BoKS) contains a stack-based buffer overflow vulnerability in boks_autoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing.

Affected (CNA)

Vendor / product	Versions
Fortra / Fortra's Core Privileged Access Manager (BoKS)	affected 8.1.0.0 through 8.1.0.23; affected 9.0.0.0 through 9.0.0.6

CWE

CWE-121

References

https://www.fortra.com/security/advisories/product-security/fi-2026-017

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.