CVE-2026-9863 – Core Privileged Access Manager (BoKS) upgrade tooling command injection vulnerability

CVE ID :CVE-2026-9863

Published : June 15, 2026, 4:16 p.m. | 1 hour, 25 minutes ago

Description :Fortra BoKS Manager contains an OS command injection vulnerability in the client upgrade and patch tooling for legacy tar-based client installations. A malicious or compromised legacy tar-installed client selected for upgrade or patching may be able to cause commands to be executed on the BoKS Master during client version handling.

Severity: 7.5 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…