CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It may be remotely exploitable.
CVE
CVE-2026-9862
Severity
CRITICAL
CVSS
9.8
EPSS
0.99%
Original NVD Description
Fortra's Core Privileged Access Manager (BoKS) contains an OS command injection vulnerability in the boks_autoregisterd service. A remote attacker with network access to the service may be able to cause commands to be executed with the privileges of the service during the autoregistration processing.
Related CVEs
Other vulnerabilities affecting the same vendor(s)