CVE-2026-79896
Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boks_portmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boks_portmux. Although the daemon is normally restarted automatically, repeated requests can sustain the service interruption.
- Published Oct 1, 2026
- CVSS 7.5 high
- 0.3% chance of exploitation in the next 30 days (EPSS)