LIVE FEED
CRITICAL CWE-121

CVE-2026-91843

Stack overflow in login process to the Security Management and Log Servers

Check Point·Quantum Security Management

9.8/ 10
CVSS 3.1
Critical severity
0.52%
EPSS exploit odds
Chance of exploitation in the next 30 days
Higher than 45% of all CVEs
Not listed
CISA KEV catalog
No confirmed in-the-wild exploitation on CISA's list.
Timeline
Published
Sep 16, 2026
Updated
Sep 17, 2026
First covered
Sep 18, 2026
Latest story
2 months ago

Summary

A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges.

CWE-121Stack-based Buffer Overflow.

Attack profile

Attack vectorNetwork
ComplexityLow
PrivilegesNone
User interactionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

  • Check Point Quantum Security ManagementR82.10 with Jumbo Hotfix Take 44 or belowR82 with Jumbo Hotfix Take 126 or belowR81.20 with Jumbo Hotfix Take 166 or belowR81.10 (EOS) with Jumbo Hotfix Take 190 or below

References

Daily at 7:00 AM Eastern

The 0700 Brief

Every new security and AI story, summarised in one email. Confirm by email, unsubscribe in one click.

43 readers have subscribed