CVE-2026-79896

Description

Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boks_portmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boks_portmux. Although the daemon is normally restarted automatically, repeated requests can sustain the service interruption.

CVSS Vector

References

• https://www.fortra.com/security/advisories/product-security/fi-2026-016