CVE-2026-9862

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 4, 2026

Last Seen

October 4, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical OS Command Injection Vulnerability in Fortra BoKS Core70.5

A critical OS command injection vulnerability, CVE-2026-9862, has been discovered in Fortra's BoKS Core Privileged Access Manager. This flaw, rated CVSS 9.8, allows unauthenticated remote attackers to execute arbitrary commands with elevated privileges via the boks_autoregisterd service. Organizatio...