BoKS Core PAM

Fortra has released a fix for a command injection vulnerability, tracked as CVE-2026-9862, in its BoKS Core privileged access management product. The flaw sits in the autoregistration service and allows unauthenticated remote code execution, potentially leading to full system compromise. Security professionals are circulating the advisory and urging administrators to patch affected deployments promptly.