Vulnerability Details CVE-2026-9863
Fortra BoKS Manager contains an OS command injection vulnerability in the client upgrade and patch tooling for legacy tar-based client installations. A malicious or compromised legacy tar-installed client selected for upgrade or patching may be able to cause commands to be executed on the BoKS Master during client version handling.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 44.3%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2026-9863
-
cpe:2.3:a:forta:core_privileged_access_manager:*