CVE-2026-12627 PUBLISHED

Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability

Assigner: Fortra
Reserved: 18.06.2026 Published: 01.10.2026 Updated: 01.10.2026

Fortra's Core Privileged Access Manager (BoKS) contains a stack-based buffer overflow vulnerability in boks_autoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Score: 9.8

Attack Vector	Network	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	High
Privileges Required	None	Integrity Impact	High
User Interaction	None	Availability Impact	High

CVSS 3.1

Product Status

Vendor	Fortra
Product	Fortra's Core Privileged Access Manager (BoKS)
Versions	Default: unaffected affected from 8.1.0.0 to 8.1.0.23 (incl.) affected from 9.0.0.0 to 9.0.0.6 (incl.)

Workarounds

Restrict network access to boks_autoregisterd, which listens on port 6507 by default. If autoregistration is not required, disable the boks_autoregisterd service until fixed builds are installed.

Solutions

Upgrade to boks-server 8.1.0.24 or 9.0.0.7.

References

https://www.fortra.com/security/advisories/product-security/fi-2026-017

Problem Types

CWE-121 Stack-based buffer overflow CWE

Impacts

CAPEC-100 Overflow Buffers