Vulnerability · Published Oct 1, 2026 · Assigned by Fortra
CVE-2026-79899Fortra BoKS Manager bccgethostcert insecure temporary file vulnerability
High 7.9
In plain English
A high-severity security flaw in BoKS Manager from Fortra. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 0% of all known vulnerabilities).
Official description
Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable temporary files without first setting a restrictive umask. A local user on the BoKS Master who can read files under BOKS_tmp may be able to obtain CA secret or host private-key material while the utility runs, or obtain CA secret material left behind after successful certificate creation.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Fortra | BoKS Manager | 8.1.0.0 – through 8.1.0.239.0.0.0 – through 9.0.0.6 |
Weakness: CWE-377 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N