Known vulnerabilities in Core Privileged Access Manager (BoKS)

Vendor: Fortra
Software: Core Privileged Access Manager (BoKS)
Software CPE: cpe:2.3:a:fortra:boks:*:*:*:*:*:*:*:*
Website: https://www.goanywhere.com/
Total vulnerabilities: 10
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Core Privileged Access Manager (BoKS) Core Privileged Access Manager (BoKS) is affected by 10 known vulnerabilities: 1 critical, 3 high, 4 medium, 2 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153308 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2026-79901		 CWE-338 Medium
No
No
 - 06.10.2026 SB2026100622
#VU153307 - Out-of-bounds write
CVE-2026-79900		 CWE-787 Low
No
No
 8.1.0.24, 9.0.0.7 06.10.2026 SB2026100619
#VU153306 - Insecure Temporary File
CVE-2026-79899		 CWE-377 High
No
No
 - 06.10.2026 SB2026100622
#VU153305 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-79898		 CWE-78 Low
No
No
 - 06.10.2026 SB2026100622
#VU153304 - Out-of-bounds read
CVE-2026-79896		 CWE-125 Medium
No
No
 - 06.10.2026 SB2026100622
#VU153303 - Stack-based buffer overflow
CVE-2026-12627		 CWE-121 High
No
No
 - 06.10.2026 SB2026100622
#VU153302 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2026-9864		 CWE-338 Medium
No
No
 - 06.10.2026 SB2026100622
#VU153301 - Heap-based Buffer Overflow
CVE-2026-14316		 CWE-122 High
No
No
 - 06.10.2026 SB2026100622
#VU134968 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-9863		 CWE-78 Medium
No
No
 - 19.06.2026 SB20260619104
#VU134942 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-9862		 CWE-78 Critical
No
No
 - 19.06.2026 SB20260619104