Description
A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| checkpoint | Quantum Security Management | R82.10 with Jumbo Hotfix Take 44 or below, R82 with Jumbo Hotfix Take 126 or below, R81.20 with Jumbo Hotfix Take 166 or below, R81.10 (EOS) with Jumbo Hotfix Take 190 or below, R81 (EOS), R80.40 (EOS), R80.30 (EOS), R80.20 (EOS), R80.10 (EOS), R80 (EOS) | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 1 repository
-
HORKimhab/CVE-2026-91843 ★ 0 · Sep 18, 2026
CVE-2026-91843 - Draft or TODO
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 2
- WID-SEC-2026-3429 Check Point Security Management: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten BSI CERT-Bund (WID) · Sep 20, 2026
- NCSC-2026-0384 Kwetsbaarheid verholpen in Check Point's Security Management and Log Servers NCSC-NL (Netherlands) · Sep 18, 2026