Is CVE-2026-79901 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-79901 being exploited in the wild.

How severe is CVE-2026-79901?

Critical severity, with a CVSS score of 9.9, published 1 October 2026.

Which products and versions are affected?

Fortra BoKS See advisory FI-2026-012.

Is there a fix for CVE-2026-79901?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-79901 attacked?

It is attacked over the network.

Am I affected by CVE-2026-79901?

Check whether you run Fortra BoKS at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-79901: Fortra BoKS boks_keytabmd predictable password generation

CVE-2026-79901 · Severity: critical · CVSS 9.9 · Published 2026-10-01

Fortra BoKS is a privileged account and credential management system that manages service account passwords in Active Directory. Affected versions generate passwords using a weak random seed based on the current Unix timestamp, allowing attackers who know the service principal name to predict and verify passwords offline, potentially gaining unauthorized access to critical service accounts.

Vendors: Fortra.

Quick answers

Is CVE-2026-79901 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-79901 being exploited in the wild.
How severe is CVE-2026-79901?: Critical severity, with a CVSS score of 9.9, published 1 October 2026.
Which products and versions are affected?: Fortra BoKS See advisory FI-2026-012.
Is there a fix for CVE-2026-79901?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-79901 attacked?: It is attacked over the network.
Am I affected by CVE-2026-79901?: Check whether you run Fortra BoKS at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The boks_keytabmd component generates Active Directory service-account passwords using a pseudo-random sequence seeded only with the current Unix timestamp. An attacker with knowledge of the service principal can estimate the password-change time and brute-force a limited candidate set of passwords, then verify them offline without requiring network access or authentication. This is a cryptographic weakness in password generation that affects the confidentiality of privileged credentials.

Affected products

Fortra BoKS See advisory FI-2026-012

Timeline

2026-10-01: disclosed

References

https://www.fortra.com/security/advisories/product-security/fi-2026-012

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.