rootpwn

high · CVSS v3 7.9

CVE-2026-79899

Fortra BoKS Manager's bccgethostcert utility creates predictable temporary files without first setting a restrictive umask. A local user on

Overview

Fortra BoKS Manager's bccgethostcert utility creates predictable temporary files without first setting a restrictive umask. A local user on the BoKS Master with read access to BOKS_tmp may be able to access CA secret or host private-key material while the utility runs or from files left behind after certificate creation. This matters because exposure of CA or host private keys can undermine certificate trust and related access controls.

Description

Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable temporary files without first setting a restrictive umask. A local user on the BoKS Master who can read files under BOKS_tmp may be able to obtain CA secret or host private-key material while the utility runs, or obtain CA secret material left behind after successful certificate creation.

Impact

Confidentiality is the primary impact, with potential exposure of CA secret or host private-key material. Integrity and availability are less directly described, but exposed keys could weaken trust in certificates and enable unauthorized access to protected systems. Impacted parties include BoKS Master administrators, PKI operators, and any local accounts or services with read access to the BOKS_tmp directory.

Remediation

Apply the vendor patch or update when available. Until patched, restrict access to BOKS_tmp to the minimum required accounts and services, enforce a restrictive umask for certificate operations, and remove or securely archive leftover temporary files after certificate creation. Rotate CA or host private keys if exposure is suspected, and add monitoring for unauthorized access to BOKS_tmp and certificate-related files.

Risk context

High severity based on CVSS v3 7.9, with no EPSS score provided. Treat as a priority for BoKS Master systems where local untrusted users or services can access BOKS_tmp, especially where CA or host private keys are present.

Affected products

  • Fortra BoKS Manager
  • Fortra BoKS Manager bccgethostcert
  • BoKS Master

Scores

Severity
high
CVSS v2
6.2
CVSS v3
7.9
CVSS v4
—
EPSS
—

insecure-temp-file local-access private-key-exposure PKI Fortra BoKS umask confidentiality

← All CVEs

Related CVEs

high

CVE-2026-96780

CVE-2026-96780 is a high‑severity denial‑of‑service vulnerability in figlet.js that can cause an unbounded loop when whitespaceBreak is enabled and the width parameter is too small. The loop consumes CPU and memory, potentially exhausting system resources. It affects applications that use figlet.js versions prior to 1.11.3.

View analysis

high

CVE-2026-94390

The Hide Shipping Method For WooCommerce plugin (v1.5.4 and earlier) contains a PHP Object Injection flaw that can be exploited by attackers to execute arbitrary code on a WordPress site. This vulnerability allows attackers to compromise the confidentiality, integrity, and availability of the affected e‑commerce store. It is relevant to any WordPress site that has the plugin installed and not patched.

View analysis

high

CVE-2026-95588

CVE-2026-95588 is an unauthenticated arbitrary file deletion vulnerability affecting AcyMailing SMTP Newsletter versions 11.0.5 and earlier. It matters because an attacker may be able to delete files on the application server without authentication, potentially disrupting service or weakening security controls.

View analysis

high

CVE-2026-97260

Unauthenticated XSS vulnerability exists in MaxGalleria versions up to 6.5.3, allowing attackers to inject malicious scripts via user input fields. The flaw can be triggered without authentication, potentially affecting all users who view affected content. It is a high severity issue that could compromise user sessions and data integrity.

View analysis