Heap Buffer Overflow in Fortra's Security Product
CVE-2026-14316

8.1HIGH

Key Information:

Vendor

Fortra
Status
Core Privileged Access Manager (boks)
Vendor
CVE Published:
1 October 2026

What is CVE-2026-14316?

A vulnerability exists in Fortra's Security Product where the error management for revoked keys improperly constructs a human-readable failure message. The buffer allocated for this message is insufficient, allowing potential exploitation through a heap buffer overflow. This flaw could enable unintended memory writes, which may compromise the integrity and security of the affected systems.

Affected Version(s)

Core Privileged Access Manager (BoKS) 8.1.0.0 < 8.1.0.30

Core Privileged Access Manager (BoKS) 10.1.0.0 < 10.1.1.0

References

https://www.fortra.com/security/advisories/product-securi...

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.