Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root
Read original article ↗AI Summary
A critical vulnerability, CVE-2026-91843, in Check Point's Security Management and Log Servers allows unauthenticated remote attackers to execute code as root via a stack overflow in the login process when a long username is provided. The vulnerability affects multiple versions of Check Point's R80, R81, and R82 branches, including R82.20, and impacts standalone, Log Server, and Multi-Domain deployments. Exploitation is possible over the network through the Trusted Clients setting, which must be restricted to prevent unauthorized access. Check Point has released a LivePatch fix, but no known in-the-wild exploitation has been reported as of September 17, 2026.
AI-extracted · verify before operational use
No entities or IoCs were extracted from this article.