core_privileged_access_manager_boks vulnerabilities
CVEs whose affected-version data names the core_privileged_access_manager_boks package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-14316High· 8.1The revoked-key error path builds a human-readable failure reason using sprintf() into a heap buffer
The revoked-key error path builds a human-readable failure reason using sprintf() into a heap buffer. The allocated buffer is too small for the final formatted message. When sprintf() writes the full message, it can write past the end of…
▾ TwilightFortra · Core Privileged Access Manager (BoKS)EPSS 0.22%via NVD
CVE-2026-9864Medium· 4.8Fortra BoKS Server Agent contains a predictable password generation vulnerability in the adjoin utility
Fortra BoKS Server Agent contains a predictable password generation vulnerability in the adjoin utility. Machine-account passwords generated during Active Directory join or password renewal operations may have significantly less entropy …
▾ SunlitFortra · Core Privileged Access Manager (BoKS)EPSS 0.15%via NVD