CVE-2026-12627CWE-121

CVE-2026-12627

Critical · published October 1, 2026

CVSS v3.1
9.8
EPSS
0%
Percentile
37.4
In the wild
Unconfirmed
What it is

Fortra's Core Privileged Access Manager (BoKS) contains a stack-based buffer overflow vulnerability in boks_autoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00442 · 37.4th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-10-01T20:17Z
References (1)
https://www.fortra.com/security/advisories/product-security/fi-2026-017 · df4dee71-de3a-4139-9588-11b62fe6c0ff
EPSS history
Timeline
  • 03 OCT 03:41Z
    EPSS moved — → 0%
    epss
  • 01 OCT 15:29Z
    Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability
    cvelistv5