OCTOBER 6, 2026
Live Feed
Back to database
Case File

CVE-2026-12627

CRITICAL · CVSS 9.8 EPSS 0.44%

Source: NVD + CISA KEV + EPSS · Published 2026-10-01 · Last synced 2026-10-06

CyberRota Analysis

AI-Generated

Fortra's Core Privileged Access Manager is vulnerable to a stack-based buffer overflow in the autoregistration service, which can be exploited by remote attackers with network access. This vulnerability may lead to memory corruption, potentially allowing attackers to execute arbitrary code on the affected system. Organizations using this product should prioritize immediate remediation efforts due to the critical severity of the issue.

CVE
CVE-2026-12627
Severity
CRITICAL
CVSS
9.8
EPSS
0.44%

Original NVD Description

Fortra's Core Privileged Access Manager (BoKS) contains a stack-based buffer overflow vulnerability in boks_autoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing.