CVE-2026-14316
Heap buffer overflow in boks_sshd revoked-key error handling
CVSS Score
8.1
EPSS Score
0.0%
EPSS Percentile
0th
The revoked-key error path builds a human-readable failure reason using sprintf() into a heap buffer. The allocated buffer is too small for the final formatted message. When sprintf() writes the full message, it can write past the end of the heap allocation.
| CWE | CWE-122 |
| Vendor | fortra |
| Product | core privileged access manager (boks) |
| Published | Oct 1, 2026 |
| Last Updated | Oct 1, 2026 |
Stay Ahead of the Next One
Get instant alerts for fortra core privileged access manager (boks)
Be the first to know when new high vulnerabilities affecting fortra core privileged access manager (boks) are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None
Affected Versions
Fortra / Core Privileged Access Manager (BoKS)
8.1.0.0 < 8.1.0.30 10.1.0.0 < 10.1.1.0