An ordinary Active Directory user can recover BoKS-generated service-account passwords offline.

every source is a publisher ruled unable to originate; not published as a finding

Sources

ResearchCVE-2026-79901 - Vulnerability Details - OpenCVE ResearchFortra Patches Critical Vulnerabilities in BoKS - SecurityWeek

Copy link

Share this finding

Email Hacker News Reddit Mastodon Bluesky X LinkedIn Facebook Copy link

Read the full daily brief →

Every finding here carries a source that was checked before it published. If something is wrong, write to admin@fullchain.sh — corrections are published on the day they affect.

Sunday, October 4, 2026