[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fHX7iaF-vU46920RUCiA3SJ4Fqc4iX68JCu5ePSTF6Js":3},{"article":4,"iocs":44,"watch_terms":49,"solutions":50,"lesson":140},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"da35389d-e284-4818-9536-286db9ad9c11","Check Point, Kaspersky, Tanium Patch Product Vulnerabilities","check-point-kaspersky-tanium-patch-product-vulnerabilities-d40645","Check Point Security Management and Log Servers are affected by a critical vulnerability that can allow remote code execution with root privileges. The post Check Point, Kaspersky, Tanium Patch Product Vulnerabilities appeared first on SecurityWeek.","Cybersecurity vendors Check Point, Kaspersky, and Tanium have released patches for severe vulnerabilities affecting their products. Check Point's Security Management and Log Servers have a critical RCE flaw (CVE-2026-91843), though no in-the-wild exploitation is reported. Tanium addressed five high- and medium-severity flaws in Tanium Asset and Threat Response, including SQL injection and SSRF. Kaspersky patched a Redis vulnerability in Kaspersky Security 10 for Linux Mail Server that could lead to malfunction or code execution.","Check Point, Kaspersky, and Tanium patch critical vulnerabilities in their products.","https:\u002F\u002Fwww.securityweek.com\u002Fcheck-point-kaspersky-tanium-patch-product-vulnerabilities\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2025\u002F05\u002Ffirewall.jpeg","2026-09-18T07:14:04+00:00","2026-09-18T08:00:24.306187+00:00",8,[17,20,22,24,27,29],{"name":18,"type":19},"Check Point","vendor",{"name":21,"type":19},"Kaspersky",{"name":23,"type":19},"Tanium",{"name":25,"type":26},"Security Management and Log Server","product",{"name":28,"type":26},"Tanium Asset",{"name":30,"type":26},"Threat Response","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":31,"icon":33,"name":34,"slug":35},null,"Vulnerabilities","vulnerabilities",[37,39],{"category":38},{"id":31,"icon":33,"name":34,"slug":35},{"category":40},{"id":41,"icon":33,"name":42,"slug":43},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[45],{"type":46,"value":47,"context":48},"cve","CVE-2026-91843","Critical RCE vulnerability in Check Point Security Management and Log Servers",[18,21,23],{"controls":51,"vendors":134},[52,81,109],{"slug":53,"name":54,"problem":55,"products":56},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[57,65,73],{"vendor_slug":58,"vendor_name":59,"vendor_logo":60,"product_slug":61,"product_name":62,"url":63,"description":64},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":69,"product_name":70,"url":71,"description":72},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":77,"product_name":78,"url":79,"description":80},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":82,"name":83,"problem":84,"products":85},"patch-management","Automated patch management","Known holes get closed in days, not months.",[86,94,101],{"vendor_slug":87,"vendor_name":88,"vendor_logo":89,"product_slug":90,"product_name":91,"url":92,"description":93},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":82,"product_name":98,"url":99,"description":100},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":102,"vendor_name":103,"vendor_logo":104,"product_slug":105,"product_name":106,"url":107,"description":108},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"slug":110,"name":111,"problem":112,"products":113},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",[114,121,129],{"vendor_slug":115,"vendor_name":116,"vendor_logo":117,"product_slug":118,"product_name":116,"url":119,"description":120},"lansweeper","Lansweeper","\u002Fvendor-logos\u002Flansweeper.png","lansweeper-asset-inventory","https:\u002F\u002Fwww.lansweeper.com\u002Fproduct\u002Fasset-inventory\u002F","Discovery with and without agents that keeps one central, always-updated inventory of devices, software and their details.",{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"runzero","runZero","\u002Fvendor-logos\u002Frunzero.png","runzero-platform","runZero Platform","https:\u002F\u002Fwww.runzero.com\u002Fplatform\u002F","Finds and fingerprints everything on the network and in the cloud, including IoT and OT devices, without agents or credentials, and flags exposures.",{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":130,"product_name":131,"url":132,"description":133},"axonius-cyber-assets","Axonius Cyber Assets","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fcyber-assets","A continuously reconciled view of every asset, who owns it, which security controls cover it and where it drifts from policy.",[135],{"slug":136,"name":18,"logo_path":137,"roles":138},"check-point","\u002Fvendor-logos\u002Fcheck-point.png",[139],"affected",{"slug":141,"title":142,"body":143,"framework_refs":144,"framework_notes":155},"critical-flaws-in-security-vendor-products-demand-urgent-patching","Critical Flaws in Security Vendor Products Demand Urgent Patching","Three major cybersecurity vendors — Check Point, Kaspersky, and Tanium — have disclosed severe vulnerabilities in their own security products, including a critical remote code execution flaw, SQL injection, SSRF, and a Redis misconfiguration. This is particularly significant because security tools are trusted components of an organization's defense infrastructure, meaning a compromise here can undermine an entire security stack. The irony of security products harboring exploitable vulnerabilities underscores that no software is inherently safe by virtue of its purpose. Organizations that delay patching these tools may inadvertently expose their most sensitive security telemetry and administrative controls to attackers. Prompt action is essential given the severity ratings and the potential for in-the-wild exploitation to emerge rapidly after public disclosure.",[145,146,147,148,149,150,151,152,153,154],"CIS Control 7: Continuous Vulnerability Management","CIS Control 2: Inventory and Control of Software Assets","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management","NIST SI-2: Flaw Remediation","NIST RA-5: Vulnerability Monitoring and Scanning","NIST CM-6: Configuration Settings","ITIL: Change and Release Management","ISO\u002FIEC 27001: A.12.6.1 Management of Technical Vulnerabilities","OWASP: SQL Injection Prevention (CWE-89)","OWASP: Server-Side Request Forgery Prevention (CWE-918)",{}]