Check Point, Kaspersky, Tanium Patch Product Vulnerabilities
Check Point fixes critical unauthenticated RCE CVE-2026-91843 in Security Management; Tanium and Kaspersky also patch product vulnerabilities.
Check Point patched CVE-2026-91843, a critical flaw in Security Management and Log Server that lets unauthenticated attackers remotely execute arbitrary code with root privileges via the login process; the vendor found no evidence of in-the-wild exploitation but shared potential IoCs. Tanium issued five advisories fixing two high-severity SQL injection vulnerabilities in Tanium Asset plus SQL tampering, SSRF, and access control issues in Threat Response. Kaspersky addressed a 2023 Redis vulnerability in Kaspersky Security 10 for Linux Mail Server that could cause malfunction or code execution when processing certain files.
- CVE-2026-91843 enables unauthenticated root-level RCE through the Check Point login process
- No evidence of in-the-wild exploitation, but Check Point shared potential IoCs
- Tanium fixed two high-severity authenticated SQL injection flaws in Tanium Asset
- Kaspersky patched a 2023 Redis vulnerability in Security 10 for Linux Mail Server
- CVEs
- CVE-2026-91843
- Vendors
- Check PointKasperskyTanium
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-91843 | Unauthenticated stack overflow gives root RCE in Check Point login process | 9.8 | <1% | PoC |
From the original article
1 min read at securityweek.com
Check Point Security Management and Log Servers are affected by a critical vulnerability that can allow remote code execution with root privileges. The post Check Point, Kaspersky, Tanium Patch Product Vulnerabilities appeared first on SecurityWeek.
By Eduard Kovacs · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.