Out-of-bounds Read Vulnerability in Fortra BoKS Manager's TLS ClientHello Parser

CVE-2026-79896

What is CVE-2026-79896?

Fortra BoKS Manager has a vulnerability in its custom TLS ClientHello parser utilized by boks_portmux, allowing remote unauthenticated attackers to exploit an out-of-bounds read. By crafting a malformed ClientHello message, attackers can disrupt the boks_portmux service. While the service typically restarts automatically, consistent exploitation can lead to prolonged interruptions, impacting overall system availability and security.

References