All vulnerabilities
CVE-2026-14316

Core Privileged Access Manager (BoKS): Heap buffer overflow in boks_sshd revoked-key error handling

Fortra Core Privileged Access Manager (BoKS)Identity & access
Open in ThreatlineRecord JSON
CVSS
8.1High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.22%Chance of exploitation activity in the next 30 days, higher than 11% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in8.1.0.30Also 10.1.1.0CVE List
Published1 Oct 2026Updated 1 Oct 2026CVE List

What fixes it

  • 8.1.0.30Core Privileged Access Manager (BoKS)CVE List
  • 10.1.1.0Core Privileged Access Manager (BoKS)CVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

The revoked-key error path builds a human-readable failure reason using sprintf() into a heap buffer. The allocated buffer is too small for the final formatted message. When sprintf() writes the full message, it can write past the end of the heap allocation.

Text from CVE List

Affected versions 2

  • Core Privileged Access Manager (BoKS)affected: 8.1.0.0 before 8.1.0.30CVE List
  • Core Privileged Access Manager (BoKS)affected: 10.1.0.0 before 10.1.1.0CVE List

References 1