Vulnerability · Published Oct 1, 2026 · Assigned by Fortra
CVE-2026-14316Heap buffer overflow in boks_sshd revoked-key error handling
High 8.1
In plain English
A high-severity heap buffer overflow in Core Privileged Access Manager (BoKS) from Fortra. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities).
Severity (CVSS 3.1)8.1High
Exploit odds (30 days)0.2%top 87.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The revoked-key error path builds a human-readable failure reason using sprintf() into a heap buffer. The allocated buffer is too small for the final formatted message. When sprintf() writes the full message, it can write past the end of the heap allocation.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Fortra | Core Privileged Access Manager (BoKS) | 8.1.0.0 – before 8.1.0.3010.1.0.0 – before 10.1.1.0 |
Weakness: CWE-122 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N