CVE-2026-79899— Fortra BoKS Manager bccgethostcert insecure temporary file vulnerability
Quick assessment
Affected
Fortra BoKS Manager
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Fortra BoKS Manager 中的 工具存在不安全的临时文件漏洞。该工具在创建可预测的临时文件之前，未先设置严格的 （用户掩码）。BoKS Master 上的本地用户若能读取位于 目录下的文件，则可能在工具运行期间获取 CA 私钥或主机私钥材料，或在证书成功创建后获取遗留的 CA 密钥材料。
Possible ATT&CK Techniques 1 AI
T1552.004 · Private Keys
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-79899
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Fortra BoKS Manager bccgethostcert insecure temporary file vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable temporary files without first setting a restrictive umask. A local user on the BoKS Master who can read files under BOKS_tmp may be able to obtain CA secret or host private-key material while the utility runs, or obtain CA secret material left behind after successful certificate creation.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
不安全的临时文件
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Fortra | BoKS Manager | 8.1.0.0 ~ 8.1.0.23 | - |
|
II. Public POCs for CVE-2026-79899
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-79899
请登录查看更多情报信息。
Other References for CVE-2026-79899 (1)
Same Patch Batch · Fortra · 2026-10-01 · 4 CVEs total
| CVE-2026-79901 | 9.9 CRITICAL | Predictable Active Directory service-account passwords in BoKS Manager |
| CVE-2026-79898 | 9.1 CRITICAL | Fortra BoKS Manager crlserver command injection vulnerability |
| CVE-2026-79900 | 6.5 MEDIUM | Heap overflow in KSL checksum initialization |
IV. Related Vulnerabilities
Same vendor: Fortra
-
CVE-2026-79898
Fortra BoKS Manager crlserver command injection vulnerabilit -
CVE-2026-79900
Heap overflow in KSL checksum initialization -
CVE-2026-79901
Predictable Active Directory service-account passwords in Bo -
CVE-2026-15913
Path Traversal in Fortra's GoAnywhere MFT Endpoint -
CVE-2026-12164
Privilege Escalation in Fortra File Integrity Monitoring (FI
Same weakness: CWE-377
-
CVE-2026-40635
Dell PowerScale OneFS 资源管理错误漏洞 -
CVE-2026-63404
Faktory: Insecure predictable /tmp/redis.conf enables local -
CVE-2026-75920
phpMyFAQ before 4.1.6 Information Disclosure via Backup ZIP -
CVE-2026-53759
linuxfabrik-lib: Insecure creation of SQLite databases -
CVE-2026-73584
Sblim-sfcb: sblim-sfcb: privileged file corruption and denia
V. Comments for CVE-2026-79899
No comments yet