Fortra

A critical vulnerability, tracked as CVE-2026-9862, has been disclosed in Fortra's BoKS Core Privileged Access Manager. The flaw is an OS command injection issue, meaning an attacker could potentially execute arbitrary system commands on affected servers. Because BoKS is used to manage privileged access at enterprises, security teams are being urged to review their exposure and patch promptly.

Security company Fortra has released patches for critical vulnerabilities affecting its BoKS product. SecurityWeek reported the update, though details on the flaws, affected versions, and whether they have been exploited in the wild were not provided in the initial coverage. Users of the software are advised to apply the fixes promptly, as critical vulnerabilities in security and access management products are often targeted by attackers.

A daily security news digest dated October 3, 2026, aggregates five updates from two outlets. The Hacker News published an overview of the state of cybersecurity in 2026, covering key segments, insights and innovations, while SecurityWeek reported that Fortra has patched a critical vulnerability. The roundup bundles mainstream infosec reporting into a single update for practitioners tracking the day's threats and vendor fixes.