{"id":"CVE-2026-79898","published":"2026-10-01T15:17:31.623","lastModified":"2026-10-01T20:34:26.287","description":"Fortra BoKS Manager contains a command injection vulnerability in crlserver. An authenticated user authorized to add CRL URLs through BCC, the WSI REST or SOAP API, or the cacrl command-line interface could cause shell command substitution to be processed by crlserver as root on the BoKS Master. BCC and WSI provide network-accessible administration paths and do not require a local sudo or suexec rule; non-root use of cacrl requires such a rule.","cvssScore":9.1,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-78"],"vendors":[],"products":[],"references":[{"url":"https://www.fortra.com/security/advisories/product-security/fi-2026-015","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw allows an authenticated user to inject shell commands, potentially leading to full system compromise.","exploitability":"Exploitation requires an authenticated user with specific permissions, making it moderately difficult.","blast_radius":"If exploited, the attacker could gain root access, impacting the entire system and all data.","remediation":"Disable the affected feature or restrict access to the BCC and WSI REST/SOAP API endpoints.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","auth-bypass","api","command-injection"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-02T08:46:51.510Z"}}