What’s Vulnerable › Vulnerabilities

CVE-2026-91843: Stack overflow in login process to the Security Management and Log Servers

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-16 · updated 2026-09-18
• Weakness: CWE-121

Description

A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges.

Affected products

• checkpoint Quantum Security Management: through R82.10 with Jumbo Hotfix Take 44; through R82 with Jumbo Hotfix Take 126; through R81.20 with Jumbo Hotfix Take 166; through R81.10 (EOS) with Jumbo Hotfix Take 190; R81 (EOS), R80.40 (EOS), R80.30 (EOS), R80.20 (EOS), R80.10 (EOS), R80 (EOS)

References

• https://support.checkpoint.com/results/sk/sk1000155

Get alerted when CVE-2026-91843 or the next vulnerability affects your stack