Critical Stack-Based Buffer Overflow Vulnerability in Fortra's Core Privileged Access Manager (BoKS)
A critical stack-based buffer overflow vulnerability (CVE-2026-12627) has been identified in Fortra's Core Privileged Access Manager (BoKS), specifically in the boks_autoregisterd component. This vulnerability has a CVSS score of 9.8 and allows a remote attacker with network access to the autoregistration service to potentially trigger memory corruption during client response processing. The vulnerability affects versions 8.1.0.0 to 8.1.0.23 and 9.0.0.0 to 9.0.0.6 of BoKS. Immediate patching is highly recommended to prevent potential exploitation.