CVE-2026-79896
Received Received - Intake

Out-of-Bounds Read in Fortra BoKS Manager

Publication date: 2026-10-01

Last updated on: 2026-10-01

Assigner: Fortra

Description
Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boks_portmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boks_portmux. Although the daemon is normally restarted automatically, repeated requests can sustain the service interruption.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-01
Last Modified
2026-10-01
Generated
2026-10-01
AI Q&A
2026-10-01
EPSS Evaluated
N/A
NVD
CVE-2026-79896
EUVD
EUVD-2026-90881

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
fortra boks_manager *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Fortra BoKS Manager has an out-of-bounds read flaw in its custom TLS ClientHello parser used by boks_portmux. A remote attacker can send a malformed ClientHello message to crash the boks_portmux daemon. The daemon restarts automatically, but repeated attacks can keep it down.

Impact Analysis

This vulnerability can cause service disruption by repeatedly crashing the boks_portmux daemon, leading to downtime for Fortra BoKS Manager. It does not directly expose data but can impact availability of the system.

Compliance Impact

This vulnerability could impact compliance with standards like GDPR and HIPAA by causing service disruptions to Fortra BoKS Manager, which may be used to manage access controls and audit logs. Repeated exploitation could lead to prolonged unavailability, potentially violating availability requirements in these regulations.

Mitigation Strategies

Apply the latest security patches or updates from Fortra to address the out-of-bounds read vulnerability in BoKS Manager. Monitor boks_portmux for unexpected terminations and ensure automatic restarts are functioning correctly.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-79896. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart