Fortra - Core Privileged Access Manager (boks) - CRITICAL - CVE-2026-9862. Fortra's Core Privileged Access Manager (BoKS) is vulnerable to an OS command injection due to a flaw in the boks_autoregisterd service. This vulnerability allows a remote attacker with network access to manipulate the service and execute commands with its privileges during autoregistration. Such an exploit can lead to unauthorized commands being run, potentially compromising sensitive information and system integrity.