F
Vendor security profile4 actively exploited CVEs
fortra
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs19
Critical5
CISA KEV4
Public exploit4
Patch rate%5
Avg. CVSS7.5
12-month vulnerability rate
0
1
0
0
0
2
0
3
0
0
1
8
CVE KEV
CVE severity distribution
19toplam CVE
Critical5 (26%)
High7 (37%)
Medium5 (26%)
Uncertain2 (11%)
Patch and exploitation view
%5
Verified patch
%21
CISA KEV
%21
Public exploit
1Patch available
0Partial
2Workaround
0Vendor: no patch
16Unknown
Latest vulnerabilities
8.1
CVE-2026-14316
Heap buffer overflow in boks_sshd revoked-key error handling
F
Patch status unknownEPSS %0
4.8
CVE-2026-9864
Fortra BoKS Server Agent adjoin machine-account password generation vulnerability
F
Patch status unknownEPSS %0
9.8
CVE-2026-12627
Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability
F
Patch status unknownEPSS %0
7.5
CVE-2026-79896
Fortra BoKS Manager boks_portmux TLS ClientHello out-of-bounds read vulnerability
F
Patch status unknownEPSS %0
9.1
CVE-2026-79898
Fortra BoKS Manager crlserver command injection vulnerability
F
Patch status unknownEPSS %1
7.9
CVE-2026-79899
Fortra BoKS Manager bccgethostcert insecure temporary file vulnerability
F
Patch status unknownEPSS %0
6.5
CVE-2026-79900
Heap overflow in KSL checksum initialization
F
Patch status unknownEPSS %0
9.9
CVE-2026-79901
Predictable Active Directory service-account passwords in BoKS Manager
F
Patch status unknownEPSS %0
7.7
CVE-2026-15913
Path Traversal in Fortra's GoAnywhere MFT Endpoint
F
Patch status unknownEPSS %0
4.4
CVE-2026-12164
Vulnerability in Fortra File Integrity Monitoring
F
Patch status unknownEPSS %0