Is CVE-2026-12627 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-12627?

CVE-2026-12627 has a CVSS v3 severity of CRITICAL (9.8).

Back

CVE-2026-12627

Description

Fortra's Core Privileged Access Manager (BoKS) contains a stack-based buffer overflow vulnerability in boks_autoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing.