CVE-2026-79896

Published: Oct 1, 2026Modified: Oct 1, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: df4dee71-de3a-4139-9588-11b62fe6c0ff (Secondary)

Description

Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boks_portmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boks_portmux. Although the daemon is normally restarted automatically, repeated requests can sustain the service interruption.

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (1)

https://www.fortra.com/security/advisories/product-security/fi-2026-016

Source: df4dee71-de3a-4139-9588-11b62fe6c0ff

Timeline

No history available yet.