CVE-2026-79901

CRITICAL9.9

Published 2026-10-01 · Updated 2026-10-01 · Source df4dee71-de3a-4139-9588-11b62fe6c0ff

Description

In deployments using BoKS keytab management, affected versions of boks_keytabmd generate Active Directory service-account passwords from a predictable pseudo-random sequence seeded with the current Unix timestamp. An attacker who knows the service principal and can estimate the password-change time can reproduce a limited candidate set and verify candidates offline.

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-338

References

https://www.fortra.com/security/advisories/product-security/fi-2026-012

View on NVD

Related CVEs

Same severity, most recent

CVE-2026-12627
Fortra's Core Privileged Access Manager (BoKS) contains a stack-based buffer overflow vulnerability in boks_autoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing.
2026-10-01 · score 9.8
CVE-2026-79898
Fortra BoKS Manager contains a command injection vulnerability in crlserver. An authenticated user authorized to add CRL URLs through BCC, the WSI REST or SOAP API, or the cacrl command-line interface could cause shell command substitution to be processed by crlserver as root on the BoKS Master. BCC and WSI provide network-accessible administration paths and do not require a local sudo or suexec rule; non-root use of cacrl requires such a rule.
2026-10-01 · score 9.1
CVE-2026-62071
Unauthenticated SQL Injection in WordPress File Upload <= 5.1.10 versions.
2026-10-01 · score 9.3
CVE-2026-103752
Unauthenticated Privilege Escalation in Authorizer <= 3.15.3 versions.
2026-10-01 · score 9.8
CVE-2026-103264
Fleet versions before 4.87.0 contain an authentication bypass vulnerability in the device API that accepts hostnames and hardware serials as authentication tokens in addition to device UUIDs. Unauthenticated attackers who know or guess these non-secret identifiers can authenticate as iOS/iPadOS hosts to read device data and trigger device-scoped actions including software installation and MDM migration.
2026-10-01 · score 9.1