CP
Product
Core Privileged Access Manager (BoKS)
5
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 1High 2Medium 2Low 0
Watch
Add Core Privileged Access Manager (BoKS) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-9862 | 9.8 | Jun 15 | Core Privileged Access Manager (BoKS) autoregistration service command injection vulnerability Affected: boks-server 8.1.0.0 through boks-server 8.1.0.22; boks-server 9.0.0.0 through boks-server 9.0.0.4 |
| CVE-2026-9863 | 8.8 | Jun 15 | Core Privileged Access Manager (BoKS) upgrade tooling command injection vulnerability Affected: boks-server 8.1.0.0 through boks-server 8.1.0.22; boks-server 9.0.0.0 through boks-server 9.0.0.4 |
| CVE-2026-14316 | 8.1 | Oct 1 | Heap buffer overflow in boks_sshd revoked-key error handling Affected: 8.1.0.0 before 8.1.0.30; 10.1.0.0 before 10.1.1.0 |
| CVE-2025-13532 | 6.2 | Dec 16 | Weak Password Hash in Core Privileged Access Manager (BoKS) Affected: This issue affects BoKS Server Agent 9.0 instances that support yescrypt and are running in a BoKS 8.1 domain. The affected platforms are: Debian 11, 12, 13, RedHat 9, 10 and Ubuntu 24. |
| CVE-2026-9864 | 4.8 | Oct 1 | Fortra BoKS Server Agent adjoin machine-account password generation vulnerability Affected: 8.1.0.0 through 8.1.0.29; 9.0.0.0 through 9.0.0.5 |
Showing 5