CVE-2026-9864— Fortra BoKS Server Agent adjoin machine-account password generation vulnerability
一分钟漏洞结论
影响对象
Fortra Core Privileged Access Manager (BoKS)
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
Fortra BoKS Server Agent 中的 adjoin 工具存在一个可预测的密码生成漏洞。在加入 Active Directory 或执行密码更新操作时生成的机器账户密码，其随机性（熵）可能远低于预期，从而更容易被能够估算密码生成时间的攻击者所预测。
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2026-9864 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Fortra BoKS Server Agent adjoin machine-account password generation vulnerability
来源: CVE Program / CVE List V5
Vulnerability Description
Fortra BoKS Server Agent contains a predictable password generation vulnerability in the adjoin utility. Machine-account passwords generated during Active Directory join or password renewal operations may have significantly less entropy than intended, making them more susceptible to prediction by an attacker who can estimate when the password was generated.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
来源: CVE Program / CVE List V5
Vulnerability Type
使用具有密码学弱点缺陷的PRNG
来源: CVE Program / CVE List V5
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| Fortra | Core Privileged Access Manager (BoKS) | 8.1.0.0 ~ 8.1.0.29 | - |
|
二、漏洞 CVE-2026-9864 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2026-9864 的情报信息
请登录查看更多情报信息。
CVE-2026-9864 其他参考 (1)
同批安全公告 · Fortra · 2026-10-01 · 共 8 条
| CVE-2026-79901 | 9.9 CRITICAL | BoKS Manager 可预测的AD服务账户密码漏洞 |
| CVE-2026-12627 | 9.8 CRITICAL | Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vuln |
| CVE-2026-79898 | 9.1 CRITICAL | Fortra BoKS Manager crlserver命令注入漏洞 |
| CVE-2026-14316 | 8.1 HIGH | Heap buffer overflow in boks_sshd revoked-key error handling |
| CVE-2026-79899 | 7.9 HIGH | Fortra BoKS Manager bccgethostcert 不安全临时文件漏洞 |
| CVE-2026-79896 | 7.5 HIGH | Fortra BoKS Manager boks_portmux TLS ClientHello out-of-bounds read vulnerability |
| CVE-2026-79900 | 6.5 MEDIUM | KSL校验和初始化堆溢出漏洞 |
IV. Related Vulnerabilities
Same product: Core Privileged Access Manager (BoKS)
-
CVE-2026-14316
Heap buffer overflow in boks_sshd revoked-key error handling -
CVE-2026-9863
Fortra Core Privileged Access Manager 命令注入漏洞 -
CVE-2026-9862
Fortra Core Privileged Access Manager 命令注入漏洞 -
CVE-2025-13532
Fortra Core Privileged Access Manager 安全漏洞 -
CVE-2025-5141
Fortra Core Privileged Access Manager 安全漏洞
Same vendor: Fortra
-
CVE-2026-14316
Heap buffer overflow in boks_sshd revoked-key error handling -
CVE-2026-12627
Fortra's Core Privileged Access Manager (BoKS) autoregistrat -
CVE-2026-79896
Fortra BoKS Manager boks_portmux TLS ClientHello out-of-boun -
CVE-2026-79898
Fortra BoKS Manager crlserver命令注入漏洞 -
CVE-2026-79899
Fortra BoKS Manager bccgethostcert 不安全临时文件漏洞
V. Comments for CVE-2026-9864
暂无评论