CVE-2026-9863

Fortra BoKS Manager contains an OS command injection vulnerability in the client upgrade and patch tooling for legacy tar-based client installations. A malicious or compromised legacy tar-installed client selected for upgrade or patching may be able to cause commands to be executed on the BoKS...

CVE-2026-9862

Fortra's Core Privileged Access Manager BoKS contains an OS command injection vulnerability in the boksautoregisterd service. A remote attacker with network access to the service may be able to cause commands to be executed with the privileges of the service during the autoregistration processing...

PT-2026-49246

Name of the Vulnerable Software and Affected Versions Fortra BoKS Manager affected versions not specified Description An OS command injection issue exists in the client upgrade and patch tooling used for legacy tar-based client installations. A malicious or compromised legacy tar-installed client...

PT-2026-49245

Name of the Vulnerable Software and Affected Versions Fortra Core Privileged Access Manager BoKS affected versions not specified Description An OS command injection flaw exists in the boks autoregisterd service. A remote attacker with network access to this service can execute arbitrary commands...