Fortra Patches Critical Vulnerabilities in BoKS

Fortra has shipped fixes for eight security flaws in its Core Privileged Access Manager (BoKS), a tool used to centrally manage and enforce access policies across Unix and Linux systems. Three of the issues are rated critical: CVE-2026-79901 (CVSS 9.9) lets an attacker bypass authentication because BoKS keytab generates Active Directory service account passwords from a predictable, timestamp-seeded pseudo-random sequence, allowing offline guessing with limited prerequisites; CVE-2026-79898 (CVSS 9.1) is a command injection bug in the crlserver component reachable via BCC or the WSI REST/SOAP API, letting an authenticated attacker run root-level shell commands on the BoKS Master without needing local sudo or suexec rules; and CVE-2026-12627 (CVSS 9.8) is a stack buffer overflow in the autoregistration feature that a remote attacker could exploit to corrupt memory. Fortra also patched five additional high- and medium-severity issues, including heap overflows, an out-of-bounds read, insecure temp-file handling, and another predictable password weakness. The vendor says there is no evidence of exploitation so far, but customers managing AD service accounts or exposing BCC/WSI interfaces should apply the updates promptly given the severity of these bugs.