Check Point, Kaspersky, Tanium Patch Product Vulnerabilities
Check Point fixes critical unauthenticated RCE CVE-2026-91843 in Security Management; Tanium and Kaspersky also patch product vulnerabilities.
Check Point patched CVE-2026-91843, a critical flaw in Security Management and Log Server that lets unauthenticated attackers remotely execute arbitrary code with root privileges via the login process; the vendor found no evidence of in-the-wild exploitation but shared potential IoCs. Tanium issued five advisories fixing two high-severity SQL injection vulnerabilities in Tanium Asset plus SQL tampering, SSRF, and access control issues in Threat Response. Kaspersky addressed a 2023 Redis vulnerability in Kaspersky Security 10 for Linux Mail Server that could cause malfunction or code execution when processing certain files.
- CVE-2026-91843 enables unauthenticated root-level RCE through the Check Point login process
- No evidence of in-the-wild exploitation, but Check Point shared potential IoCs
- Tanium fixed two high-severity authenticated SQL injection flaws in Tanium Asset
- Kaspersky patched a 2023 Redis vulnerability in Security 10 for Linux Mail Server
Vulnerabilities mentionedAll →
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-91843 | Unauthenticated stack overflow gives root RCE in Check Point login process CVE-2026-91843 is a stack-based buffer overflow (CWE-121) in the unauthenticated login process of a Check Point product, as Check Point Software ([email protected]) is the assigning CNA and its CVE scope covers Check Point products. An attacker can trigger the flaw remotely by sending crafted input to the login interface before authenticating, with no user interaction or credentials required. Successful exploitation allows arbitrary code execution with root privileges, the highest level of control on the affected system. The vulnerability is rated 9.8 Critical (AV:N/AC:L/PR:N/UI:N, all impacts high), reflecting trivial network exploitability. No public proof-of-concept or confirmed in-the-wild exploitation is known at this time, and the source data does not name the specific product line or affected version ranges. Do: Monitor Check Point's official advisory channels for the affected product/version list and patch release, and upgrade as soon as fixed versions are published. In the interim, restrict the login/management interface of Check Point appliances to trusted management networks and remove any direct internet exposure, and review perimeter logs for anomalous pre-authentication traffic against that interface. | 9.8 | — |
| — |
Full article318 words · extracted from securityweek.com · click to collapse
Cybersecurity firms Check Point, Kaspersky, and Tanium have each patched severe vulnerabilities in their products, including ones that can be exploited for remote code execution.
Check Point has informed customers about a critical vulnerability affecting Security Management and Log Server products.
The flaw, CVE-2026-91843, can be exploited by an unauthenticated attacker “to remotely execute arbitrary code with root privileges through the login process.”
Threat actors appear to have set their sights on vulnerabilities in Check Point products in recent months, including zero-days. However, for CVE-2026-91843 the vendor noted that there is no evidence of in-the-wild exploitation. Nevertheless, it has shared some potential indicators of compromise (IoCs).
Check Point has advised customers who don’t have automatic updates enabled to immediately patch their installations.
Tanium published five new advisories this week to inform customers about high- and medium-severity vulnerabilities.
Advertisement. Scroll to continue reading.
In Tanium Asset, the company fixed two high-severity SQL injection vulnerabilities that authenticated attackers can exploit to gain read and write access to restricted data, or tamper with SQL queries executed by the service.
A vulnerability that can be leveraged for SQL query tampering has also been fixed in Threat Response.
Threat Response has also received patches for two medium-severity vulnerabilities: a server-side request forgery allowing access to restricted data, and an improper access control issue that can be exploited to create or modify alerts.
Kaspersky published a new advisory on September 17 to inform users that Kaspersky Security 10 for Linux Mail Server is affected by a Redis vulnerability discovered in 2023.
“The vulnerability could potentially cause product malfunction or allow an attacker to execute code when processing files of a certain format,” Kaspersky explained.
Related: Check Point Patches Critical VPN Vulnerabilities
Related: Trend Micro, Tanium, ESET and Tenable Patch Severe Product Vulnerabilities
Related: Ivanti Patches Critical Flaws Across Enterprise Security Products
Text extracted automatically; images, tables and formatting may be missing. Original: https://www.securityweek.com/check-point-kaspersky-tanium-patch-product-vulnerabilities/