{"metadata": {"vulnerability": "CVE-2026-91843", "count": 62, "kinds": {"milestone": 7, "sighting": 42, "kev": 0, "other": 13}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0384", "record": "NCSC-2026-0384", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-15T08:30:18.206Z", "date_only": false, "value": "2026-09-15T08:30:18.206Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-91843", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-16T00:00:00Z", "date_only": true, "value": "2026-09-16", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1193", "record": "CERTFR-2026-AVI-1193", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-09-16T13:03:40.553Z", "date_only": false, "value": "2026-09-16T13:03:40.553Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-91843", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-16T13:03:40.553Z", "date_only": false, "value": "2026-09-16T13:03:40.553Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / checkpoint", "record": "CVE-2026-91843", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-16T14:10:04.923Z", "date_only": false, "value": "2026-09-16T14:10:04.923351Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvncwo6f2s25", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "b3cdc2b0-6ede-4af6-880e-9a4c66584ca4", "content": "CVE-2026-91843 - quantum security management\nThe login function in Checkpoint Quantum Security Management can overflow its memory when accessed without authentication. This flaw could let an attacker execute their\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#checkpoint #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mvncwo6f2s25"}, {"timestamp": "2026-09-16T14:17:13Z", "date_only": false, "value": "2026-09-16T14:17:13Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9R37-4RP3-MW4W", "record": "GHSA-9R37-4RP3-MW4W", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-16T14:17:13.947Z", "date_only": false, "value": "2026-09-16T14:17:13.947", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-91843", "record": "FKIE_CVE-2026-91843", "field": "published"}, {"timestamp": "2026-09-16T15:31:10Z", "date_only": false, "value": "2026-09-16T15:31:10Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9R37-4RP3-MW4W", "record": "GHSA-9R37-4RP3-MW4W", "field": "published"}, {"timestamp": "2026-09-16T15:31:10Z", "date_only": false, "value": "2026-09-16T15:31:10Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9R37-4RP3-MW4W", "record": "GHSA-9R37-4RP3-MW4W", "field": "modified"}, {"timestamp": "2026-09-16T16:08:30.780Z", "date_only": false, "value": "2026-09-16T16:08:30.780418Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mvnjkgy4da2t", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "7d991276-70f5-4755-bff8-2fcac3048f8a", "content": "Check Point fixed a critical Check Point login flaw (CVE-2026-91843). Patch this Check Point login flaw now to block unauthenticated remote root takeovers.\n\n#CheckPoint #Cybersecurity #CVE202691843 #InfoSec #Vulnerability", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mvnjkgy4da2t"}, {"timestamp": "2026-09-16T16:11:09.648Z", "date_only": false, "value": "2026-09-16T16:11:09.648912Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvnjp5crtb2p", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "17ee1f5e-6f48-4418-94bd-2ea6b2544414", "content": "\ud83d\udea8 CVE-2026-91843 \u2014 CVSS 9.8 CRITICAL\n\nA stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remot...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-91843\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mvnjp5crtb2p"}, {"timestamp": "2026-09-16T22:23:16.713Z", "date_only": false, "value": "2026-09-16T22:23:16.713963Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/censys.bsky.social/post/3mvo6ikd56b2w", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "72503c8f-6e10-40eb-8b14-eff3eb68f698", "content": "\ud83d\udea8CVE-2026-91843 is a critical (CVSS 9.8) pre-auth RCE affecting Check Point Quantum Security Management and Log Servers.\n\nCensys sees 3,836 hosts globally with the management/log server role.\n\nNo public PoC or confirmed exploitation as of publication. Patches are available. https://bit.ly/4cRApEJ", "url": "https://bsky.app/profile/censys.bsky.social/post/3mvo6ikd56b2w"}, {"timestamp": "2026-09-16T22:38:50.668Z", "date_only": false, "value": "2026-09-16T22:38:50.668669Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/censys/statuses/117283080996096403", "record": "cve-2026-91843", "field": "creation_timestamp", "uuid": "a9f9809c-73a9-42c3-8fcf-854fd820007e", "content": "\ud83d\udea8New Censys Advisory: CVE-2026-91843\nA critical (CVSS 9.8) unauthenticated RCE affects Check Point Quantum Security Management and Log Servers.\nCensys observes 3,836 hosts globally exposing the management/log server role. This is total product presence, not a confirmed-vulnerable count.\nNo public PoC or confirmed exploitation has been reported as of publication. Check Point has released patches for supported versions via LivePatch.\nRead the analysis and remediation details: https://censys.com/advisory/cve-2026-91843/\n#Cybersecurity #CVE #Vulnerability #CensysARC", "url": "https://infosec.exchange/users/censys/statuses/117283080996096403"}, {"timestamp": "2026-09-17T00:00:00Z", "date_only": false, "value": "2026-09-17T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1193", "record": "CERTFR-2026-AVI-1193", "field": "last_revision_date"}, {"timestamp": "2026-09-17T00:00:00Z", "date_only": false, "value": "2026-09-17T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1193", "record": "CERTFR-2026-AVI-1193", "field": "initial_release_date"}, {"timestamp": "2026-09-17T00:00:00Z", "date_only": false, "value": "2026-09-17T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1193", "record": "CERTFR-2026-AVI-1193", "field": "revisions.0.revision_date"}, {"timestamp": "2026-09-17T00:24:18.945Z", "date_only": false, "value": "2026-09-17T00:24:18.945556Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mvofayuhzt2i", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "07042145-6e7a-4a48-8e14-69d9c8a71bc7", "content": "Check Point Login Flaw CVE-2026-91843: Critical Root RCE via Unauthenticated Login\uff08Check Point\u306e\u30ed\u30b0\u30a4\u30f3\u51e6\u7406\u306b\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001\u8a8d\u8a3c\u4e0d\u8981\u3067root\u6a29\u9650\u306eRCE\uff09 #SecurityOnline (Sep 16)\n\nsecurityonline.info/check-point-...", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3mvofayuhzt2i"}, {"timestamp": "2026-09-17T00:58:23.187Z", "date_only": false, "value": "2026-09-17T00:58:23.187222Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/daniel1820815/statuses/117282347479668935", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "045e5c07-ede5-4f81-b71f-b03093d6da72", "content": "\ud83d\udea8 Please read this important update from Check Point:\nCVE-2026-91843 - Stack overflow in login process to the Security Management and Log Servers\nhttps://support.checkpoint.com/results/sk/sk1000155\n#CheckPoint #CheckPointsoftwareTechnologies #CVE #CVE202691843", "url": "https://infosec.exchange/users/daniel1820815/statuses/117282347479668935"}, {"timestamp": "2026-09-17T03:56:52.301Z", "date_only": false, "value": "2026-09-17T03:56:52.301574Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-91843", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-17T03:56:52.301Z", "date_only": false, "value": "2026-09-17T03:56:52.301574Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-91843", "record": "FKIE_CVE-2026-91843", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-17T06:36:26.399Z", "date_only": false, "value": "2026-09-17T06:36:26.399913Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mvp22ftku72p", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "f523a7bc-9673-4ab1-bfdc-34ae842445c3", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85706: 48 interactions\nCVE-2026-76461: 16 interactions\nCVE-2026-82078: 15 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-76460: 10 interactions\nCVE-2026-91843: 9 interactions\nCVE-2026-76461: 8 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mvp22ftku72p"}, {"timestamp": "2026-09-17T11:39:25.299Z", "date_only": false, "value": "2026-09-17T11:39:25.299Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-91843", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-17T11:39:25.299Z", "date_only": false, "value": "2026-09-17T11:39:25.299Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-91843", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-17T13:05:06.382Z", "date_only": false, "value": "2026-09-17T13:05:06.382695Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mvpprfewhs2w", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "33814386-8aec-43c8-99c1-f39faf117c6a", "content": "\ud83d\udd17 CVE : CVE-2026-91843", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mvpprfewhs2w"}, {"timestamp": "2026-09-17T20:01:46.519Z", "date_only": false, "value": "2026-09-17T20:01:46.519332Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/ichintu/4d54d491df96f43f63328c7ac7c50625", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "9b5edc7c-6737-461b-8885-496d234be643", "content": "**Executive Summary (Sept 16\u201317, 2026)**\n\nThis threat intelligence digest highlights critical vulnerabilities and urgent patch requirements across major software and infrastructure vendors. Key fixes include:\n* **OpenDDS** (CVE-2026-52836): Remote DoS via malformed RTPS submessage (Fixed: v3.34.0)\n* **Check Point** (CVE-2026-91843): Login stack overflow affecting Management/Log Servers\n* **Dell Server Update Utility** (CVE-2026-56795): Local code execution via uncontrolled search path (Fixed: v26.07.01)\n* **BIND 9**: 14 patched flaws, including an unauthenticated DoS via DNS-over-HTTPS\n* **Cisco ISE & Related Products**: Multiple authentication bypass vulnerabilities patched. **CVE-2026-76460 is actively exploited in the wild** and has been added to the CISA KEV catalog. Patches also cover FTD, FMC, ASA, and Nexus Dashboard.\n\nThe digest also notes community discussions regarding a removed Reddit post, a potential API key image, and a new Claude AI skill for cybersecurity automation. Organizations are strongly advised to immediately apply vendor updates, prioritize actively exploited flaws, and enhance logging and network segmentation.", "url": "https://gist.github.com/ichintu/4d54d491df96f43f63328c7ac7c50625"}, {"timestamp": "2026-09-17T20:15:23.633Z", "date_only": false, "value": "2026-09-17T20:15:23.633847Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/check-point-security-advisory-av26-933", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "289704e8-bc24-4af8-ae8f-70456a29619c", "url": "https://cyber.gc.ca/en/alerts-advisories/check-point-security-advisory-av26-933"}, {"timestamp": "2026-09-17T22:00:04.859Z", "date_only": false, "value": "2026-09-17T22:00:04.859008Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/10092", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "fc1e90bb-9a94-41e1-a0f8-4a5616c1189e", "content": "\u203c\ufe0f NEW - Critical Check Point management flaw lets unauthenticated attackers run code as root.\n\nThe 9.8-rated bug (CVE-2026-91843) sits in the login path before authentication.\n\nAffected versions and fix details: https://thehackernews.com/2026/09/critical-check-point-management-server.html", "url": "https://t.me/thehackernews/10092"}, {"timestamp": "2026-09-18T01:25:11.088Z", "date_only": false, "value": "2026-09-18T01:25:11.088477Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mvqz4ohcbs2t", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "27dddf6a-4fa7-4f35-9366-2d8a01db7ff8", "content": "Check Point Security Management\u306bCritical \u8106\u5f31\u6027 CVE-2026-91843\u3000\u8a8d\u8a3c\u4e0d\u8981\u3067root\u6a29\u9650\u306e\u4efb\u610f\u30b3\u30fc\u30c9\u5b9f\u884c \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mvqz4ohcbs2t"}, {"timestamp": "2026-09-18T07:14:31.551Z", "date_only": false, "value": "2026-09-18T07:14:31.551504Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvrmngc5rd2p", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "b848e02e-ce31-4678-a1bc-f6a97a47009d", "content": "\ud83e\udd16 CVE-2026-91843 (CVSS 9.8): pre-auth stack overflow in Check Point Security Management login process \u2014 unauthenticated RCE as root on management/log servers. Fifth critical unauth flaw since July; LivePatch fix\u2026", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mvrmngc5rd2p"}, {"timestamp": "2026-09-18T07:30:25.581Z", "date_only": false, "value": "2026-09-18T07:30:25.581433Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117290868689391326", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "d26a920e-cd60-4f0d-ab67-a50161522008", "content": "Check Point Security Mgmt & Log Server hit by CRITICAL RCE (CVE-2026-91843) via unauthenticated login. No active exploitation yet. Patch ASAP. Tanium (SQLi, RCE) & Kaspersky (Redis) also patched. https://radar.offseq.com/threat/check-point-kaspersky-tanium-patch-product-vulnerabilities-ae8c3757ea9b181a #OffSeq #Vulnerability #RCE #PatchNow", "url": "https://infosec.exchange/users/offseq/statuses/117290868689391326"}, {"timestamp": "2026-09-18T07:30:27.547Z", "date_only": false, "value": "2026-09-18T07:30:27.547276Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvrnjvl5uj2a", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "9b5a6e7c-41c0-4c32-8a30-40d7f9708499", "content": "CRITICAL: CVE-2026-91843 lets attackers run root code on Check Point Mgmt & Log Server via login. No exploitation yet \u2014 patch now. Tanium & Kaspersky also issue fixes. Details: https://radar.offseq.com/threat/check-point-kaspersky-tanium-patch-product-vulnerabilities-ae8c3757ea9b181a #OffSeq #Vul...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mvrnjvl5uj2a"}, {"timestamp": "2026-09-18T08:32:59.455Z", "date_only": false, "value": "2026-09-18T08:32:59.455670Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mvrqzpryys2c", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "21613e4f-e4e8-4e59-aada-eeab0d77e015", "content": "Check Point Fixes Critical CVE-2026-91843 Allowing Root Code Execution\n\nsecurityaffairs.com/199279/secur...\n\n#Kyberturvallisuus #ThreatIntel #Haavoittuvuus", "url": "https://bsky.app/profile/hapsis.bsky.social/post/3mvrqzpryys2c"}, {"timestamp": "2026-09-18T08:38:34.354Z", "date_only": false, "value": "2026-09-18T08:38:34.354601Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0384", "record": "NCSC-2026-0384", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-18T08:38:34.354Z", "date_only": false, "value": "2026-09-18T08:38:34.354601Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0384", "record": "NCSC-2026-0384", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-09-18T08:38:34.354Z", "date_only": false, "value": "2026-09-18T08:38:34.354601Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0384", "record": "NCSC-2026-0384", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-18T09:46:38.597Z", "date_only": false, "value": "2026-09-18T09:46:38.597319Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cloud/statuses/117290805440362985", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "59deb9d6-62e9-40a4-b8c4-f1a4876c1d24", "content": "\ud83e\udd16 CVE-2026-91843 (CVSS 9.8): pre-auth stack overflow in Check Point Security Management login process lets unauthenticated attackers run code as root on management/log servers.\nFifth critical unauthenticated management flaw since July. LivePatch fix out; restrict Trusted Clients.\n\ud83d\udd17 https://thehackernews.com/2026/09/critical-check-point-management-server.html#CVE #InfoSec #CyberSec", "url": "https://infosec.exchange/users/cloud/statuses/117290805440362985"}, {"timestamp": "2026-09-18T09:47:18.008Z", "date_only": false, "value": "2026-09-18T09:47:18.008699Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/beyondmachines1/statuses/117291225815473498", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "a1c7cd40-46ac-4539-a60f-a1d9a7fd16d8", "content": "Critical Check Point Management Flaw Allows Unauthenticated Remote Root Access\nCheck Point issued an patch for a critical stack overflow vulnerability (CVE-2026-91843) in its Security Management and Log Servers that allows unauthenticated attackers to gain root-level code execution.\n**If you run Check Point Security Management or Log Servers, make sure they are never reachable from the internet and restrict the Trusted Clients setting so only specific, known admin IP addresses can connect (use a VPN for remote access). Then apply the LivePatch fix released on September 16, 2026 to every management and log server, confirm it installed with `cplp list`, and check your logs for \"Administrator failed to log in: Username too long\" to spot attempted attacks.**#cybersecurity #infosec #advisory #vulnerabilityhttps://beyondmachines.net/event_details/critical-check-point-management-flaw-allows-unauthenticated-remote-root-access-9-x-m-8-o/gD2P6Ple2L", "url": "https://infosec.exchange/users/beyondmachines1/statuses/117291225815473498"}, {"timestamp": "2026-09-18T10:00:05.799Z", "date_only": false, "value": "2026-09-18T10:00:05.799457Z", "kind": "sighting", "label": "Seen", "source": "Telegram/RMFeecNFdeBfqZGCiKRKdmgilxvSr-CdpZBiJXTYBfto56ZU", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "62beca84-bde1-481b-8c8d-0c5204cc7342"}, {"timestamp": "2026-09-18T10:00:05.846Z", "date_only": false, "value": "2026-09-18T10:00:05.846523Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/257010", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "985128e0-298e-45eb-bb0d-57f0111b99c3", "content": "Check Point Fixes Critical CVE-2026-91843 Allowing Root Code Execution\nhttps://ift.tt/ND7rspz", "url": "https://t.me/ctinow/257010"}, {"timestamp": "2026-09-18T10:30:24.938Z", "date_only": false, "value": "2026-09-18T10:30:24.938932Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117291576457373276", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "da10d584-0e20-4924-beb0-16a12535897b", "content": "Check Point Security Mgmt & Log Server face CRITICAL stack buffer overflow (CVE-2026-91843). Remote, unauthenticated RCE as root possible. Patch now or restrict access, monitor for 'Username too long' login failures. https://radar.offseq.com/threat/new-check-point-flaw-lets-hackers-execute-code-with-root-privileges-00056aa571ef0004 #OffSeq #CheckPoint #Vuln #RCE", "url": "https://infosec.exchange/users/offseq/statuses/117291576457373276"}, {"timestamp": "2026-09-18T10:30:26.891Z", "date_only": false, "value": "2026-09-18T10:30:26.891687Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvrxlqwjd32z", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "212285bd-992e-474a-8110-8c381b24ea5d", "content": "CVE-2026-91843: Check Point Security Management & Log Server vulnerable to CRITICAL remote code execution as root. Apply patches or restrict access, monitor for admin login failures. https://radar.offseq.com/threat/new-check-point-flaw-lets-hackers-execute-code-with-root-privileges-00056aa571ef00...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mvrxlqwjd32z"}, {"timestamp": "2026-09-18T12:00:28.153Z", "date_only": false, "value": "2026-09-18T12:00:28.153947Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mvs4mq4wtg2q", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "a198a10b-5ea5-456f-b495-50a0f56cbd7a", "content": "Check Point patched CVE-2026-91843, a critical buffer overflow that can let unauthenticated attackers gain root RCE on Security Management Server and Log Server systems. #CheckPoint #CVE202691843 #NCSCNL", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mvs4mq4wtg2q"}, {"timestamp": "2026-09-18T12:45:10.534Z", "date_only": false, "value": "2026-09-18T12:45:10.534985Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mvs74ofvuq23", "record": "cve-2026-91843", "field": "creation_timestamp", "uuid": "98d72dcb-36c1-41d4-9004-4a88f38632cd", "content": "check point management server: unauth RCE via login handler stack overflow. CVSS 9.8, root impact. patch available\u2026 https://0daynews.com/articles/2026-09-18-check-point-management-cve-2026-91843-rce-root/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-2376", "url": "https://bsky.app/profile/0daynews.bsky.social/post/3mvs74ofvuq23"}, {"timestamp": "2026-09-18T14:00:03.858Z", "date_only": false, "value": "2026-09-18T14:00:03.858805Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityIL/9510", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "5419dcb2-efe3-4d4e-8542-6dfbaf5e25ba", "content": "\u05d5\u05e2\u05d5\u05d3 \u05d0\u05d7\u05ea:\n\u26d4\ud83d\ude00 \u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1\u05e6'\u05e7\u05e4\u05d5\u05d9\u05e0\u05d8 \u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05dc\u05ea\u05d5\u05e7\u05e3 \u05dc\u05d4\u05e8\u05d9\u05e5 \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 \u05e2\u05dd \u05d4\u05e8\u05e9\u05d0\u05d5\u05ea \u05d0\u05d3\u05de\u05d9\u05df.\n\n\u05e4\u05e8\u05d8\u05d9\u05dd \u05e0\u05d5\u05e1\u05e4\u05d9\u05dd \u05e2\u05dc \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 CVE-2026-91843, \u05d4\u05e4\u05d0\u05e6', \u05d4\u05d3\u05e8\u05da \u05dc\u05d0\u05ea\u05e8 \u05d0\u05dd \u05d4\u05d5\u05ea\u05e7\u05e4\u05ea\u05dd \u05d5\u05e2\u05d5\u05d3, \u05d1\u05d4\u05d5\u05d3\u05e2\u05d4 \u05e9\u05dc \u05e6'\u05e7\u05e4\u05d5\u05d9\u05e0\u05d8.\n\nhttps://t.me/CyberSecurityIL/9510", "url": "https://t.me/CyberSecurityIL/9510"}, {"timestamp": "2026-09-18T15:42:47.940Z", "date_only": false, "value": "2026-09-18T15:42:47.940585Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117292804616812179", "record": "cve-2026-91843", "field": "creation_timestamp", "uuid": "202fa2b2-efa1-4766-95e3-c51b35b14100", "content": "\ud83d\udcf0 Check Point Patches Critical RCE Flaw in Management Servers\nCheck Point patches critical RCE flaw (CVE-2026-91843, CVSS 9.8) in Security Management Servers. Unauthenticated attackers can gain root access via a long username. LivePatch is available. Restrict trusted client access now! #CyberSecurity #CheckPoin...\n\ud83d\udd17 https://cyber.netsecops.io/articles/check-point-patches-critical-rce-flaw-cve-2026-91843-in-management-servers/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "url": "https://mastodon.social/ap/users/115426718704364579/statuses/117292804616812179"}, {"timestamp": "2026-09-18T15:43:44.583Z", "date_only": false, "value": "2026-09-18T15:43:44.583255Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mvsj3xycgq2i", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "d134bcdf-6229-42d1-bd84-4a0a8f1ed2b7", "content": "Check Point patches critical RCE flaw (CVE-2026-91843, CVSS 9.8) in Security Management Servers. Unauthenticated attackers can gain root access via a long username. LivePatch is available. Restrict trusted client access now! #CyberSecurity #CheckPoin...\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "url": "https://bsky.app/profile/netsecio.bsky.social/post/3mvsj3xycgq2i"}, {"timestamp": "2026-09-18T18:00:07.090Z", "date_only": false, "value": "2026-09-18T18:00:07.090620Z", "kind": "sighting", "label": "Seen", "source": "Telegram/98XBW89DYYvCmumfjQFV-T14TeWl3VEjb1X7QjskGMkDkX4", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "b872c53a-037c-48dd-9415-6a106015dd66"}, {"timestamp": "2026-09-18T18:42:35.915Z", "date_only": false, "value": "2026-09-18T18:42:35.915048Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecurity.page/post/3mvssx6sst52w", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "e6e17caa-eb41-4a05-b986-82db92b16b12", "content": "A Check Point flaw (CVE-2026-91843) lets an attacker run code with root privileges, reportedly by sending an oversized username that triggers the bug. Detection is straightforward: watch for \"Administrator failed to log in: Username too long\" alerts in admin login logs. Patch and check those logs.", "url": "https://bsky.app/profile/cybersecurity.page/post/3mvssx6sst52w"}, {"timestamp": "2026-09-18T19:34:36.657Z", "date_only": false, "value": "2026-09-18T19:34:36.657", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-91843", "record": "FKIE_CVE-2026-91843", "field": "lastModified"}, {"timestamp": "2026-09-19T09:00:04.907Z", "date_only": false, "value": "2026-09-19T09:00:04.907893Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityIL/87300", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "dfa6fc9c-96dd-4b0d-a688-6ba44381518b", "content": "\u05d5\u05e2\u05d5\u05d3 \u05d0\u05d7\u05ea:\n\u26d4\ud83d\ude00 \u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1\u05e6'\u05e7\u05e4\u05d5\u05d9\u05e0\u05d8 \u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05dc\u05ea\u05d5\u05e7\u05e3 \u05dc\u05d4\u05e8\u05d9\u05e5 \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 \u05e2\u05dd \u05d4\u05e8\u05e9\u05d0\u05d5\u05ea \u05d0\u05d3\u05de\u05d9\u05df.\n\n\u05e4\u05e8\u05d8\u05d9\u05dd \u05e0\u05d5\u05e1\u05e4\u05d9\u05dd \u05e2\u05dc \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 CVE-2026-91843, \u05d4\u05e4\u05d0\u05e6', \u05d4\u05d3\u05e8\u05da \u05dc\u05d0\u05ea\u05e8 \u05d0\u05dd \u05d4\u05d5\u05ea\u05e7\u05e4\u05ea\u05dd \u05d5\u05e2\u05d5\u05d3, \u05d1\u05d4\u05d5\u05d3\u05e2\u05d4 \u05e9\u05dc \u05e6'\u05e7\u05e4\u05d5\u05d9\u05e0\u05d8.\n\nhttps://t.me/CyberSecurityIL/9510", "url": "https://t.me/CyberSecurityIL/87300"}, {"timestamp": "2026-09-19T10:26:01.713Z", "date_only": false, "value": "2026-09-19T10:26:01.713715Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mvuhss3kts2d", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "b19913b3-d79b-4397-94f5-c73e8b80997b", "content": "Check Point Fixes Critical CVE-2026-91843 Allowing Root Code Execution\n\nCheck Point fixed CVE-2026-91843, a critical flaw that could let attackers run code as root on Security Management and Log Servers with no login needed. Check Point addressed CVE-2026-91843 (CVSS score of 9.8)\u2026\n#hackernews #news", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mvuhss3kts2d"}, {"timestamp": "2026-09-19T12:54:32.182Z", "date_only": false, "value": "2026-09-19T12:54:32.182575Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mvuq4dtsgq27", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "23e94a60-acb9-4792-9b04-c20434860824", "content": "CVE-2026-91843 (CVSS Score 9.8), affecting Check Point Security Management and Log Servers. This vulnerability may allow an unauthenticated attacker to remotely execute arbitrary code with root", "url": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mvuq4dtsgq27"}, {"timestamp": "2026-09-20T09:40:47.411Z", "date_only": false, "value": "2026-09-20T09:40:47.411621Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mvwvqswjjy2x", "record": "cve-2026-91843", "field": "creation_timestamp", "uuid": "bb856ae6-7d43-435c-a869-fa2ed16bb032", "content": "\ud83d\udcf0 Celah Kritis Check Point Memungkinkan Hacker Menjalankan Kode sebagai Root\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/20/celah-kritis-check-point-cve-2026-91843/\n\n#checkPoint #cybersecurity #firewall #keamananSiber #rce #vulnerability #zero-day", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mvwvqswjjy2x"}, {"timestamp": "2026-09-20T10:00:05.089Z", "date_only": false, "value": "2026-09-20T10:00:05.089569Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/3214", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "27c123ce-a86b-48f2-8b4e-bfd4089aa7cd", "content": "\ud83d\udd34 Check Point, Kaspersky, Tanium Patch Product Vulnerabilities\n\nCybersecurity firms Check Point, Kaspersky, and Tanium have each patched severe vulnerabilities in their products, including ones that can be exploited for remote code execution. \n\nCheck Point has informed customers about a critical vulnerability affecting Security Management and Log Server products.\n\nThe flaw, CVE-2026-91843, can be exploited by an unauthenticated attacker \u201cto remotely execute arbitrary code with root privileges through the login process.\u201d", "url": "https://t.me/pphm_HackerNews/3214"}, {"timestamp": "2026-09-20T10:00:05.181Z", "date_only": false, "value": "2026-09-20T10:00:05.181094Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/3193", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "1b3bd491-26e5-4516-80d6-9a80b31b7349", "content": "\ud83d\udd34 Critical Check Point Vulnerability Allows Remote Root Code Execution Without Authentication\n\nCheck Point has issued a high-severity security alert for CVE-2026-91843, which is a critical stack overflow vulnerability in the login process of its Security Management and Log Server products.\n\nThis flaw could allow an unauthenticated remote attacker to execute arbitrary code with root privileges, posing a significant risk to organizations utilizing affected Check Point management infrastructure.", "url": "https://t.me/pphm_HackerNews/3193"}, {"timestamp": "2026-09-20T12:27:59.465Z", "date_only": false, "value": "2026-09-20T12:27:59.465701Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mvx73skq3y2q", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "4adc9675-42fb-43f5-b396-420fe0cf6b2c", "content": "CVE-2026-91843 is trending. Hype score 10, currently #10 on cvemon.\n\nA stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-91843", "url": "https://bsky.app/profile/cvemon.bsky.social/post/3mvx73skq3y2q"}, {"timestamp": "2026-09-20T19:15:55.721Z", "date_only": false, "value": "2026-09-20T19:15:55.721845Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/insomnisec.bsky.social/post/3mvxvvas2yg2m", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "6d76ecda-a766-4b04-b009-07bd537495be", "content": "\ud83d\udce1 Check Point CVE-2026-91843: Unauthenticated Root Code Execution in Security Management and Log Servers", "url": "https://bsky.app/profile/insomnisec.bsky.social/post/3mvxvvas2yg2m"}, {"timestamp": "2026-09-21T08:01:24.854Z", "date_only": false, "value": "2026-09-21T08:01:24.854162Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mvzanzmcbc2l", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "316c01d7-8c2d-46d8-b993-96b9a6fc6e9f", "content": "Check Point \u7ba1\u7406\u30b5\u30fc\u30d0\u30fc\u306e\u91cd\u5927\u8106\u5f31\u6027\u3001\u672a\u8a8d\u8a3c\u3067 root \u6a29\u9650\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u53ef\u80fd\n\nCheck Point \u304c CVE-2026-91843 \u3092\u4fee\u6b63\u3002\u7ba1\u7406\u30b5\u30fc\u30d0\u30fc\u306e\u30ed\u30b0\u30a4\u30f3\u30b9\u30bf\u30c3\u30af \u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306b\u3088\u308a\u3001\u672a\u8a8d\u8a3c\u306e\u653b\u6483\u8005\u304c root \u6a29\u9650\u3067\u30b3\u30fc\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u3002\u7dca\u6025\u5bfe\u5fdc\u304c\u5fc5\u8981\u3002\n\n#CVE #\u8106\u5f31\u6027 #\u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "url": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mvzanzmcbc2l"}, {"timestamp": "2026-09-21T13:00:04.771Z", "date_only": false, "value": "2026-09-21T13:00:04.771230Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberDispatch/3004", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "e1331f48-64c6-49f9-b168-396fdc64d6d5", "content": "Critical Check Point management flaw lets unauthenticated attackers run code as root.\n\nThe 9.8-rated bug (CVE-2026-91843) sits in the login path before authentication.", "url": "https://t.me/CyberDispatch/3004"}, {"timestamp": "2026-09-21T15:00:03.751Z", "date_only": false, "value": "2026-09-21T15:00:03.751167Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bdufstecru/3471", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "e7fa98b7-46ce-44ed-a605-e060e7c7faef", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Check Point Security Management Server \u0438 Multi-Domain Security Management Server \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-14921\nCVE-2026-91843\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://support.checkpoint.com/results/sk/sk1000155", "url": "https://t.me/bdufstecru/3471"}, {"timestamp": "2026-10-17T03:11:18.081Z", "date_only": false, "value": "2026-10-17T03:11:18.081062Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3my24l2qmt22h", "record": "CVE-2026-91843", "field": "creation_timestamp", "uuid": "856cb630-53cd-4d1c-80d2-1b5f2146936b", "content": "Check Point\u3001Kaspersky\u3001Tanium\u306e\u30d1\u30c3\u30c1\u88fd\u54c1\u306e\u8106\u5f31\u6027\n\nCheck Point\u793e\u306f\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u7ba1\u7406\u88fd\u54c1\u304a\u3088\u3073\u30ed\u30b0\u30b5\u30fc\u30d0\u30fc\u88fd\u54c1\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\u3001\u9867\u5ba2\u306b\u901a\u77e5\u3057\u307e\u3057\u305f\u3002\n\n\u3053\u306e\u8106\u5f31\u6027\uff08CVE-2026-91843\uff09\u306f\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u304c\u300c\u30ed\u30b0\u30a4\u30f3\u30d7\u30ed\u30bb\u30b9\u3092\u901a\u3058\u3066root\u6a29\u9650\u3067\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u30ea\u30e2\u30fc\u30c8\u3067\u5b9f\u884c\u3059\u308b\u305f\u3081\u306b\u300d\u60aa\u7528\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\n\n\u3053\u3053\u6570\u30ab\u6708\u3001\u653b\u6483\u8005\u306f\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u3092\u542b\u3080\u30c1\u30a7\u30c3\u30af\u30fb\u30dd\u30a4\u30f3\u30c8\u88fd\u54c1\u306e\u8106\u5f31\u6027\u3092\u72d9\u3063\u3066\u3044\u308b\u3088\u3046\u3060\u3002\u3057\u304b\u3057\u3001CVE-2026-91843\u306b\u3064\u3044\u3066\u306f\u3001\u30d9\u30f3\u30c0\u30fc\u306f\u5b9f\u74b0\u5883\u3067\u306e\u60aa\u7528\u4e8b\u4f8b\u306f\u78ba\u8a8d\u3055\u308c\u3066\u3044\u306a\u3044\u3068 \u8ff0\u3079\u3066\u3044\u308b\u3002\u3068\u306f\u3044...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3my24l2qmt22h"}]}