CVE-2026-79896 — Fortra BoKS Manager boks_portmux TLS ClientHello out-of-bounds read vulnerability
Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boks_portmux. A remote unauthenticated attacker can submit a malfor…
Published: 2026-10-01 · CVSS: 7.5 · CVSS 3.1
Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boks_portmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boks_portmux. Although the daemon is normally restarted automatically, repeated requests can sustain the service interruption.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7