Fortra security advisory (AV26-987)

Serial number: AV26-987Date: October 2, 2026 As of October 1, 2026, Fortra is affected by a vulnerabilities in the following product: BoKS Manager boks-server Prior to 8.1.0.24 Prior to 9.0.0.7 BoKS Manager Prior to 8.1.0.24 Prior to 9.0.0.7 Core Privileged Access Manager (BoKS) Prior to 10.1.1.0 Prior to 9.0.0.7 Prior to 8.1.0.30 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Heap overflow in KSL checksum initialization Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability Heap buffer overflow in boks_sshd revoked-key error handling Fortra BoKS Manager boks_portmux TLS ClientHello out-of-bounds read vulnerability Product Security Advisories | Fortra