All vulnerabilities
CVE-2026-79899

Fortra BoKS Manager bccgethostcert insecure temporary file vulnerability

Fortra BoKS Manager
Open in ThreatlineRecord JSON
CVSS
7.9High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.07%Chance of exploitation activity in the next 30 days, higher than 0% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Published1 Oct 2026Updated 1 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Description

Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable temporary files without first setting a restrictive umask. A local user on the BoKS Master who can read files under BOKS_tmp may be able to obtain CA secret or host private-key material while the utility runs, or obtain CA secret material left behind after successful certificate creation.

Text from CVE List

Affected versions 2

  • BoKS Manageraffected: 8.1.0.0 through 8.1.0.23CVE List
  • BoKS Manageraffected: 9.0.0.0 through 9.0.0.6CVE List

References 1