Core Privileged Access Manager Server vulnerabilities

2 known vulnerabilities in Core Privileged Access Manager Server from Fortra. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Core Privileged Access Manager (BoKS): Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-9863Jun 15, 2026Fortra

  Fortra BoKS Manager contains an OS command injection vulnerability in the client upgrade and patch tooling for legacy tar-based client installations. A malicious or compromised legacy tar-installed client selected for upgrade or patching may be able to cause c

• 9.8 Critical severity

  Core Privileged Access Manager (BoKS): Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-9862Jun 15, 2026Fortra

  Fortra's Core Privileged Access Manager (BoKS) contains an OS command injection vulnerability in the boks_autoregisterd service. A remote attacker with network access to the service may be able to cause commands to be executed with the privileges of the servic