CVE-2026-9862 — Core Privileged Access Manager (BoKS) autoregistration service command injection vulnerability
Fortra's Core Privileged Access Manager (BoKS) contains an OS command injection vulnerability in the boks_autoregisterd service. A remote attacker with network access to the se…
Published: 2026-06-15 · CVSS: 9.8 · CVSS 3.1
Fortra's Core Privileged Access Manager (BoKS) contains an OS command injection vulnerability in the boks_autoregisterd service. A remote attacker with network access to the service may be able to cause commands to be executed with the privileges of the service during the autoregistration processing.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7