Security Advisory

CVE-2026-9863

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-15 15:17:19
Last updated 2026-06-15 16:08:58
Assigner Fortra
CVSS score 7.5
State PUBLISHED

Description

Fortra BoKS Manager contains an OS command injection vulnerability in the client upgrade and patch tooling for legacy tar-based client installations. A malicious or compromised legacy tar-installed client selected for upgrade or patching may be able to cause commands to be executed on the BoKS Master during client version handling.