Fortra has released patches for eight vulnerabilities in the Core Privileged Access Manager (BoKS), including three critical severity bugs.
BoKS provides organizations with centralized management of Unix and Linux fleets, enabling policy enforcement and cross-account access control.
On Thursday, the company warned that BoKS Manager deployments that rely on BoKS Keytab for managing Active Directory service accounts are affected by a critical flaw that results in authentication bypass.
The issue is tracked as CVE-2026-79901 (CVSS score of 9.9) and exists because passwords for AD service accounts are generated from a “predictable pseudo-random sequence annotated with the current Unix timestamp.”
“An attacker who knows the service principal and can estimate the password change time can reproduce a limited set of candidates and check candidates offline,” Fortra warned.
The company emphasized that an attacker could exploit the vulnerability if they knew the affected service principal, could estimate the time for the password change and had appropriate Kerberos ticketing material.
“A standard authenticated Active Directory account can typically request a service ticket for an SPN assigned to the affected account; administrative access to BoKS, the service host, or its keytab is typically not required. A previously captured service ticket may alternatively provide material for offline verification,” it said.
The second critical flaw, CVE-2026-79898 (CVSS score of 9.1), is a command injection flaw in crlserver This could allow an authenticated user to replace shell commands that would be processed as root on the BoKS master.
According to Fortra, the vulnerability is exploitable via BCC and the WSI REST or SOAP API. BCC and WSI can be accessed over the network without a local connection Sudo or suexec Rule.
The company also fixed CVE-2026-12627 (CVSS score of 9.8), a stack buffer overflow in the autoregistration feature of BoKS that could allow a remote attacker to trigger a memory corruption.
In addition, Fortra has fixed five high- and medium-severity BoKS vulnerabilities: heap buffer overflow, out-of-bounds read, insecure temporary file, and predictable password generation.
The company does not mention any of these vulnerabilities being exploited in the wild. For more information, visit Fortra’s Product safety Page.
Related: Warlock expands SharePoint exploitation in attacks on critical infrastructure
Related: Fortinet FortiMail zero-day urgent action calls exploited
Related: WatchGuard fixes a critical code injection vulnerability in the Fireware operating system
Related: Chrome and Firefox updates fix over 100 security vulnerabilities
