Fortra Access Manager Vulnerability Enables Remote Command Injection Attacks

Fortra has disclosed a critical security vulnerability in its Core Privileged Access Manager (BoKS) that could allow remote attackers to execute arbitrary commands on affected systems. CVE-2026-9862 is a critical OS command injection (CWE-78) flaw in the boks_autoregisterd service, carrying a CVSS 9.8 severity rating. It exists within the autoregistration functionality of BoKS, a component […] The post Fortra Access Manager Vulnerability Enables Remote Command Injection Attacks appeared first on Cyber Security News.