Check Point Fixes Critical CVE-2026-91843 Allowing Root Code Execution
Check Point patched CVE-2026-91843 (CVSS 9.8), a pre-authentication root RCE in Security Management and Log Servers; no exploitation observed.
65
Vendor
Censys
- Mentions · 7d0
- Mentions · 30d0
- All mentions5
- First seenAug 20, 2026
- Last mentionedSep 18, 2026
Timeline
5 articles · newest firstCritical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root
Check Point patched CVE-2026-91843 (CVSS 9.8), a pre-authentication stack overflow letting unauthenticated attackers run code as root on Security Management and Log Servers.
66
The AI Supply Chain Has a Security Problem, and Much of It Is Sitting on the Open Internet
Researchers counted 36,769 publicly reachable self-hosted AI endpoints, only about 2% behind HTTP authentication, exposing Ollama, vLLM, and Flowise to abuse.
45
Plex Urges Immediate Updates After Patching Multiple Undisclosed Security Flaws
Plex patched multiple undisclosed flaws in Media Server 1.43.3 and Desktop 1.115.0, urging all users to update immediately.
45
NSA, CISA, FBI, DOE, and EPA Warn of Active AI
Five US agencies warn of active AI-assisted attacks on internet-exposed Siemens S7 PLCs across critical infrastructure, using disguised snap7 scripts for pre-positioning reconnaissance.
88
Related CVEs
by mentions- CVE-2026-91843<1%9.8Unauthenticated stack overflow gives root RCE in Check Point login process
- CVE-2026-162324%9.3Authentication Bypass in Check Point SmartConsole Grants Full Admin Access
- CVE-2020-574173%7.2Authenticated Deserialization RCE in Plex Media Server on Windows
- CVE-2026-4093312%9.9Flowise: Due to unsafe serialization of stdio commands in the MCP adapter, an authenticated attacker can add an MCP stdio server with an…
- CVE-2025-34158<1%8.5Plex Media Server (PMS) 1.41.7.x through 1.42.0.x before 1.42.1 is affected by incorrect resource transfer between spheres because /myplex/account provides the…
Appears with
- Censysorganization · 3
- SmartConsoleproduct · 2
- CISAorganization · 2
- Check Pointorganization · 2
- Check Pointvendor · 2
- EPAorganization · 1
- SentinelOneorganization · 1
- Plex Desktopproduct · 1
- ZoomEyevendor · 1
- Siemens ProductCERTorganization · 1
- SentinelOnevendor · 1
- Check Point Security Management Serverproduct · 1
- LastPassvictim · 1
- TIA Portalproduct · 1
- Security Management Serverproduct · 1
- LastPassproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.