{"id":"CVE-2026-14316","title":"The revoked-key error path builds a human-readable failure reason using sprintf() into a heap buffer","summary":"The revoked-key error path builds a human-readable failure reason using sprintf() into a heap buffer. The allocated buffer is too small for the final formatted message. When sprintf() writes the full message, it can write past the end of…","severity":"high","cvss":8.1,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","cwe":["CWE-122"],"vendor":"Fortra","product":"Core Privileged Access Manager (BoKS)","affected":["core_privileged_access_manager_boks >= 8.1.0.0 < 8.1.0.30","core_privileged_access_manager_boks >= 10.1.0.0 < 10.1.1.0"],"published":"2026-10-01","updated":"2026-10-01","sourceUpdated":"2026-10-01T20:34:26.287","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-14316","references":[{"url":"https://www.fortra.com/security/advisories/product-security/fi-2026-019","label":"df4dee71-de3a-4139-9588-11b62fe6c0ff"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-01T16:32:47.169777Z"},"ingestedAt":"2026-10-01T18:55:42.360Z","epss":0.00217,"epssPercentile":0.12055,"slug":"CVE-2026-14316","body":"## Overview\n\nThe revoked-key error path builds a human-readable failure reason using sprintf() into a heap buffer. The allocated buffer is too small for the final formatted message. When sprintf() writes the full message, it can write past the end of the heap allocation.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":45,"depthScoreParts":{"impact":44.6,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}