CVE-2026-12627

Summary

The flaw is a stack-based buffer overflow in Fortra's Core Privileged Access Manager (BoKS), which can lead to memory corruption. This vulnerability is critical as it allows a remote attacker to exploit network access to the autoregistration service to trigger the flaw.

Exploitability

Exploitation is relatively straightforward given network access to the autoregistration service. The attacker must send a crafted request to trigger the buffer overflow.

Blast radius

If exploited, this vulnerability could result in complete control of the affected system, leading to data theft, service disruption, or further attacks.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to the latest version of Fortra's Core Privileged Access Manager (BoKS) as soon as possible.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.