# Fortra Core Privileged Access Manager (BoKS).

Every CVE that names Fortra Core Privileged Access Manager (BoKS) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Heap buffer overflow in boks_sshd revoked-key error handling](https://agentprime.io/advisories/CVE-2026-14316.md)
  `CVE-2026-14316` · CVE record: Fortra Core Privileged Access Manager (BoKS) · CVSS 8.1 High · Not analysed yet · Published 1 Oct 2026 · Tags: Memory corruption
- [Fortra BoKS Server Agent adjoin machine-account password generation vulnerability](https://agentprime.io/advisories/CVE-2026-9864.md)
  `CVE-2026-9864` · CVE record: Fortra Core Privileged Access Manager (BoKS) · CVSS 4.8 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Weak cryptography or TLS
- [Core Privileged Access Manager (BoKS) upgrade tooling command injection vulnerability](https://agentprime.io/advisories/CVE-2026-9863.md)
  `CVE-2026-9863` · CVE record: Fortra Core Privileged Access Manager (BoKS) · CVSS 7.5 High · Not analysed yet · Published 15 Jun 2026 · Tags: Command injection
- [Core Privileged Access Manager (BoKS) autoregistration service command injection vulnerability](https://agentprime.io/advisories/CVE-2026-9862.md)
  `CVE-2026-9862` · CVE record: Fortra Core Privileged Access Manager (BoKS) · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Jun 2026 · Tags: Command injection
- [Weak Password Hash in Core Privileged Access Manager (BoKS)](https://agentprime.io/advisories/CVE-2025-13532.md)
  `CVE-2025-13532` · CVE record: Fortra Core Privileged Access Manager (BoKS) · CVSS 6.2 Medium · Not analysed yet · Published 16 Dec 2025 · Tags: Weak cryptography or TLS
- [Core Privileged Access Manager (BoKS) Leakage of Sensitive Data via the Cache](https://agentprime.io/advisories/CVE-2025-5141.md)
  `CVE-2025-5141` · CVE record: Fortra Core Privileged Access Manager (BoKS) · CVSS 5.5 Medium · Not analysed yet · Published 17 Jun 2025 · Tags: CWE-524

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=fortra-core-privileged-access-manager-boks>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/fortra-core-privileged-access-manager-boks/>. Everything for agents: <https://agentprime.io/llms.txt>.