[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fEbO0XGbcgDawYkRie5njrlAkGadCfMPZrjJDaWFSlWc":3},{"article":4,"iocs":44,"watch_terms":55,"solutions":56,"lesson":142},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"171132d1-6d57-4c01-ae5e-dc7e34c1ecbe","Fortra Patches Critical Vulnerabilities in BoKS","fortra-patches-critical-vulnerabilities-in-boks-a28608","The bugs could lead to authentication bypass, shell command execution, and memory corruption. The post Fortra Patches Critical Vulnerabilities in BoKS appeared first on SecurityWeek.","Fortra has released patches for eight vulnerabilities affecting its Core Privileged Access Manager (BoKS) product, three of which are rated critical. The critical flaws include an authentication bypass due to predictable password generation for Active Directory service accounts, a command injection vulnerability in the crlserver, and a stack buffer overflow leading to memory corruption. While Fortra has not reported any exploitation in the wild, the vulnerabilities could allow attackers to bypass authentication, execute commands as root, or cause memory corruption.","Fortra patches eight vulnerabilities in BoKS PAM, including three critical flaws.","https:\u002F\u002Fwww.securityweek.com\u002Ffortra-patches-critical-vulnerabilities-in-boks\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2025\u002F01\u002Fapplication-security-vulnerabilities.jpeg","2026-10-03T11:34:00+00:00","2026-10-03T12:00:10.494517+00:00",8,[17,20,23],{"name":18,"type":19},"Core Privileged Access Manager (BoKS)","product",{"name":21,"type":22},"Fortra","vendor",{"name":24,"type":25},"Active Directory","technology","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":26,"icon":28,"name":29,"slug":30},null,"Vulnerabilities","vulnerabilities",[32,37,42],{"category":33},{"id":34,"icon":28,"name":35,"slug":36},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":38},{"id":39,"icon":28,"name":40,"slug":41},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":43},{"id":26,"icon":28,"name":29,"slug":30},[45,49,52],{"type":46,"value":47,"context":48},"cve","CVE-2026-79901","Critical authentication bypass vulnerability in BoKS Manager.",{"type":46,"value":50,"context":51},"CVE-2026-79898","Critical command injection vulnerability in crlserver.",{"type":46,"value":53,"context":54},"CVE-2026-12627","Critical stack buffer overflow vulnerability in autoregistration.",[21,18],{"controls":57,"vendors":141},[58,87,116],{"slug":59,"name":60,"problem":61,"products":62},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",[63,71,79],{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"wallix","WALLIX","\u002Fvendor-logos\u002Fwallix.png","wallix-pam","WALLIX PAM","https:\u002F\u002Fwww.wallix.com\u002Fproducts\u002Fprivileged-access-management-software\u002F","Privileged access management with session recording, for IT and OT environments.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-privileged-access-management","Idira Privileged Access Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fhuman\u002Fprivileged-access-management","Privileged access management from the former CyberArk portfolio: vaulting, rotation, just-in-time access and session monitoring.",{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"beyondtrust","BeyondTrust","\u002Fvendor-logos\u002Fbeyondtrust.png","password-safe","BeyondTrust Password Safe","https:\u002F\u002Fwww.beyondtrust.com\u002Fproducts\u002Fpassword-safe","Privileged password and session management.",{"slug":88,"name":89,"problem":90,"products":91},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[92,100,108],{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"slug":117,"name":118,"problem":119,"products":120},"patch-management","Automated patch management","Known holes get closed in days, not months.",[121,129,133],{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":117,"product_name":130,"url":131,"description":132},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":134,"vendor_name":135,"vendor_logo":136,"product_slug":137,"product_name":138,"url":139,"description":140},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",[],{"slug":143,"title":144,"body":145,"framework_refs":146,"framework_notes":160},"critical-flaws-in-privileged-access-manager-highlight-pam-security-risks","Critical Flaws in Privileged Access Manager Highlight PAM Security Risks","Fortra's BoKS Privileged Access Manager contained three critical vulnerabilities — including an authentication bypass caused by predictable password generation for Active Directory service accounts, a command injection flaw, and a stack buffer overflow — any of which could grant an attacker root-level access or full authentication bypass. The root cause spans poor cryptographic design choices, insufficient input validation, and unsafe memory handling in a product that is specifically trusted to guard privileged access. This is especially dangerous because PAM solutions sit at the heart of an organization's access control architecture; compromising them can cascade into a full domain or infrastructure takeover. Organizations must prioritize patching PAM and other privileged infrastructure tools at the same urgency level as perimeter devices.",[147,148,149,150,151,152,153,154,155,156,157,158,159],"CIS Control 7: Continuous Vulnerability Management","CIS Control 5: Account Management","CIS Control 12: Network Infrastructure Management","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 AC-2: Account Management","NIST SP 800-53 SA-11: Developer Testing and Evaluation","NIST SP 800-53 IA-5: Authenticator Management","NIST CSF ID.RA-1: Asset Vulnerabilities Identified","NIST CSF PR.IP-12: Vulnerability Management Plan","MITRE ATT&CK T1078: Valid Accounts","MITRE ATT&CK T1548: Abuse Elevation Control Mechanism","ITIL Change Management: Emergency Change Procedures","ISO\u002FIEC 27001 A.12.6.1: Management of Technical Vulnerabilities",{}]