Fortra® Security & Trust Center

Blog

October 2026 Oracle Critical Patch Update Analysis

By Tyler Reguly on Wed, 10/21/2026
Oracle has released its October 2026 Critical Patch Update, delivering 1,295 new security patches across the affected Oracle product families.The Fortra Intelligence and Research Experts (FIRE) team is reviewing the release and prioritizing coverage for vulnerabilities that combine remote reachability, low attack complexity, and high business impact.At a GlanceMetricValueNew security patches1...
Emerging Threats

PHP Critical Remote Code Execution CVE-2026-109618 and CVE-2026-109619 Vulnerabilities

Wed, 10/21/2026
Fortra is actively researching critical vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619) that could allow an attacker to execute code remotely. CVE-2026-109618 is an out-of-memory corruption vulnerability where invalid data can be treated as valid during the request cleanup. CVE-2026-109619 is a stale global state vulnerability where a worker may reuse a stale state after its backing memory is freed before it is reset. The primary recommendation is to update to a fixed or supported PHP version.
Fortra Blog
Blog

The Rise in RFQ and Project Invitation Scams

By Cadence Riddle on Thu, 10/15/2026
Executive Summary The Fortra Intelligence and Research Experts (FIRE) team is tracking a 12-fold increase in emails using requests for quotation, project invitations, and procurement inquiries as a phishing pretext from October 2025 – September 2026. These messages impersonate prospective buyers seeking pricing, availability, or project participation. Their purpose is not to obtain a legitimate...
Threat Research & Intelligence
Patch Tuesday Blog
Blog

October 2026 Patch Tuesday Analysis

By Tyler Reguly on Tue, 10/13/2026
October 2026 Patch Tuesday AnalysisToday’s Patch Tuesday Alert addresses Microsoft’s October 2026 Security Updates. The FIRE team is actively working on coverage for these vulnerabilities and expect to ship that coverage as soon as it is completed.In-the-Wild & Disclosed CVEsCVE-2026-96951A vulnerability in Windows could allow attackers to evade Mark of the Web (MOTW) defenses via command...
Phishing and RMM
Blog

Increase in Credential Phishing with Remote Management Tools

By Max Ickert on Thu, 10/08/2026
Phishing attacks are leveraging RMM tools more than everHybrid phishing-to-RMM campaigns have emerged as a potent method to target North American financial institutions, with a focused interest in business commercial banking accounts. Through the first nine months of 2026, Fortra has recorded 475% more phishing attacks incorporating RMM tools into the phishing attack chain compared to the entire...
Threat Research & Intelligence
Blog

BEC Global Insights Report September 2026

By JT Newby on Tue, 10/06/2026
EXECUTIVE SUMMARY The findings in this report come from the results of active defense engagements with BEC threat actors. Every month, Fortra Intelligence & Research Experts (FIRE) conducts hundreds of these engagements to collect comprehensive intelligence about BEC tactics and trends to help better understand how the BEC threat landscape is evolving. The primary findings for September 2026...
Security Advisory

Heap buffer overflow in boks_sshd revoked-key error handling

Thu, 10/01/2026
The revoked-key error path builds a human-readable failure reason using sprintf() into a heap buffer. The allocated buffer is too small for the final formatted message. When sprintf() writes the full message, it can write past the end of the heap allocation.
FI-2026-019
High
CVE-2026-14316
Security Advisory

Fortra BoKS Server Agent adjoin machine-account password generation vulnerability

Thu, 10/01/2026
Fortra BoKS Server Agent contains a predictable password generation vulnerability in the adjoin utility. Machine-account passwords generated during Active Directory join or password renewal operations may have significantly less entropy than intended, making them more susceptible to prediction by an attacker who can estimate when the password was generated.
FI-2026-018
Medium
CVE-2026-9864
Security Advisory

Fortra BoKS Manager boks_portmux TLS ClientHello out-of-bounds read vulnerability

Thu, 10/01/2026
Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boks_portmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boks_portmux. Although the daemon is normally restarted automatically, repeated requests can sustain the service interruption.
FI-2026-016
High
CVE-2026-79896