CVE-2026-9864

Published: Oct 1, 2026Modified: Oct 1, 2026

4.8

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Exploitability: 2.2 / Impact: 2.5

Source: df4dee71-de3a-4139-9588-11b62fe6c0ff (Secondary)

Description

Fortra BoKS Server Agent contains a predictable password generation vulnerability in the adjoin utility. Machine-account passwords generated during Active Directory join or password renewal operations may have significantly less entropy than intended, making them more susceptible to prediction by an attacker who can estimate when the password was generated.

Related CWEs

CWE-338

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

The product uses a Pseudo-Random Number Generator (PRNG) in a security context, but the PRNG's algorithm is not cryptographically strong.

References (1)

https://www.fortra.com/security/advisories/product-security/fi-2026-018

Source: df4dee71-de3a-4139-9588-11b62fe6c0ff

Timeline

No history available yet.