CVE-2026-91843: Stack overflow in login process to the Security Management and Log Servers

Critical severity · published Sep 16, 2026

CVE-2026-91843

Stack overflow in login process to the Security Management and Log Servers

9.8

CVSS

0.5%

EPSS

On KEV

Description

A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.5% · higher than 44% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Quantum Security Management · checkpoint

R82.10 with Jumbo Hotfix Take 44 or below; R82 with Jumbo Hotfix Take 126 or below; R81.20 with Jumbo Hotfix Take 166 or below; R81.10 (EOS) with Jumbo Hotfix Take 190 or below; R81 (EOS); R80.40 (EOS); +4 more · source: vendor

In the news

VulnerabilityCritical

Check Point Fixes Critical CVE-2026-91843 Allowing Root Code Execution

Check Point fixed CVE-2026-91843, a critical flaw that could let attackers run code as root on Security Management and Log Servers with no login needed. Check Point addressed CVE-2026-91843 (CVSS score of 9.8), a critical vulnerability in its Security Management and Log Servers. The flaw could let an attacker with no account run code as […]

CVE-2026-91843

Sep 18, 2026·Security Affairs

Affected product

Quantum Security Management

checkpoint

All Quantum Security Management CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2026-91843

CVE.org

https://www.cve.org/CVERecord?id=CVE-2026-91843

support.checkpoint.com

https://support.checkpoint.com/results/sk/sk1000155