{"uuid": "a1c7cd40-46ac-4539-a60f-a1d9a7fd16d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://infosec.exchange/users/beyondmachines1/statuses/117291225815473498", "content": "Critical Check Point Management Flaw Allows Unauthenticated Remote Root Access\nCheck Point issued an patch for a critical stack overflow vulnerability (CVE-2026-91843) in its Security Management and Log Servers that allows unauthenticated attackers to gain root-level code execution.\n**If you run Check Point Security Management or Log Servers, make sure they are never reachable from the internet and restrict the Trusted Clients setting so only specific, known admin IP addresses can connect (use a VPN for remote access). Then apply the LivePatch fix released on September 16, 2026 to every management and log server, confirm it installed with `cplp list`, and check your logs for \"Administrator failed to log in: Username too long\" to spot attempted attacks.**#cybersecurity #infosec #advisory #vulnerabilityhttps://beyondmachines.net/event_details/critical-check-point-management-flaw-allows-unauthenticated-remote-root-access-9-x-m-8-o/gD2P6Ple2L", "creation_timestamp": "2026-09-18T09:47:18.008699Z"}