Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In deployments using BoKS keytab management, affected versions of boks_keytabmd generate Active Directory service-account passwords from a predictable pseudo-random sequence seeded with the current Unix timestamp. An attacker who knows the service principal and can estimate the password-change time can reproduce a limited candidate set and verify candidates offline.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Fortra's BoKS generated Active Directory service-account passwords from the clock. Installing the fix secures none of the passwords it already made, and the advisory never says so. No exploitation reported. https://severitydaily.com/fortra-boks-cve-2026-79901-keytab-prng-upgrade-does-not-secure-existing-passwords/