Check Point security advisory (AV26-933)
Canadian Cyber Centre relays Check Point advisory for CVE-2026-91843, a stack overflow in the login process of Security Management and Log Servers.
On September 17, 2026, the Canadian Centre for Cyber Security (AV26-933) published an advisory for a Check Point vulnerability tracked as CVE-2026-91843. The flaw is a stack overflow in the login process affecting Security Management Server, Multi-Domain Security Management Server, Log Server and Multi-Domain Log Server versions R81.20 (Jumbo Hotfix Take 166 and prior), R82 (Take 126 and prior), R82.10 (Take 44 and prior) and R82.20. Administrators are urged to review Check Point sk1000155 and apply updates as they become available.
- CVE-2026-91843 is a stack overflow in Check Point management and log server login processes.
- Affected versions include R81.20 Take 166 and prior, R82 Take 126 and prior, R82.10 Take 44 and prior, and R82.20.
- Advisory AV26-933 references Check Point sk1000155; updates should be applied as available.
- CVEs
- CVE-2026-91843
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-91843 | Unauthenticated stack overflow gives root RCE in Check Point login process | 9.8 | <1% | PoC |
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-933 Date: September 17, 2026 As of September 16, 2026, Check Point is affected by a vulnerability in the following products: Security Management Server, Multi-Domain Security Management Server, Log Server and Multi-Domain Log Server R81. 20 with Jumbo Hotfix Take 166 and prior R82 with Jumbo Hotfix Take 126 and prior R82. 10 with Jumbo Hotfix Take 44 and prior R82.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.