CVE-2026-9862

The vulnerability (CWE-78) consists of insufficient sanitization of input data processed by the boks_autoregisterd service during the automatic registration process. An attacker with network access to this service can send crafted data containing malicious system commands. As a result, these commands are executed by the operating system with the privileges of the boks_autoregisterd process.

An attacker can execute arbitrary system commands with the privileges of the boks_autoregisterd service, which in practice can lead to system takeover, violation of data confidentiality and integrity, and disruption of its availability.

Patches available from the vendor should be applied in accordance with the references (https://www.fortra.com/security/advisories/product-security/fi-2026-007). Until the patch is applied, it is recommended to restrict network access to the boks_autoregisterd service only to trusted hosts, for example using a firewall.

Fortra Core Privileged Access Manager (BoKS) — versions indicated in the vendor's references