CVE-2026-79901

CVE Enrichment

CVSS: 9.9 CRITICAL
EPSS: 0.27%
EPSS Percentile: 17.30%
CISA KEV: Not listed

Description

In deployments using BoKS keytab management, affected versions of boks_keytabmd generate Active Directory service-account passwords from a predictable pseudo-random sequence seeded with the current Unix timestamp. An attacker who knows the service principal and can estimate the password-change time can reproduce a limited candidate set and verify candidates offline.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: df4dee71-de3a-4139-9588-11b62fe6c0ff
Published: 01-Oct-2026 21:17
Last Modified: 01-Oct-2026 22:17
EPSS Date: 2026-10-11
CWE: CWE-338

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:L /
                            UI:N /
                            S:C /
                            C:H /
                            I:H /
                            A:H

References

df4dee71-de3a-4139-9588-11b62fe6c0ff

Last enrichment sync: 12-Oct-2026 08:15
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

Windows), CVE-2026-90970, CVE-2026-1868 (GitLab AI Gateway), CVE-2026-79898, CVE-2026-12627, CVE-2026-79901 (Fortra BoKS), CVE-2026-93698, CVE-2026-93029, CVE-2026-93697 (cPanel and WHM), CVE-2026-103922 Weekly Security Recap: Exploited Citrix NetScaler Flaw and Dozens of Vulnerabilities

CVE (135)

Vendors (1)

Products (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.