[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKct8gdCU9ywYS6gAoqn3xWnEei2BT0jPGtuc4iz05TM":3},{"article":4,"iocs":45,"watch_terms":50,"solutions":51,"lesson":139},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"0bee7f37-5258-4082-baf4-7ab85c0c2f2d","Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root","critical-check-point-management-flaw-lets-unauthenticated-attackers-run-code-as--1276fb","A critical vulnerability in Check Point's Security Management and Log Servers could allow an attacker without login credentials to run code as root on those servers over the network. The Security Management Server is the system that controls firewall policy and administrator access. Check Point has released a fix through its LivePatch update channel and says it has no indication that the flaw","A critical vulnerability (CVE-2026-91843) in Check Point's Security Management and Log Servers allows unauthenticated attackers to run code as root over the network. The flaw, a stack overflow in the login process, is triggered by a long username and has a CVSS score of 9.8. Check Point has released a fix via its LivePatch update channel and has no indication of exploitation.","Critical Check Point flaw allows unauthenticated root code execution over the network.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F09\u002Fcritical-check-point-management-server.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEiuFSb4LQQ7e_Iz1RS0JfQEDY9G9LcQZ23RM0h6ladr56GJ6nN3kPwVoZPpNVJUyJEBmLVEyMaIxytF2XqyQs8fGjIdd_ymPjwaZA8Q8R7JiXC-srMFj0_YBd-a94juv46HZm4ie72j7PTj45veyTgOBaeuN53HvktSH3JTgasvV_Mo-RwjsTPnRLlHFVk\u002Fs1600\u002Fcp-main.jpg","2026-09-17T18:08:28+00:00","2026-09-18T04:00:07.533027+00:00",9,[17,20,23,25,27,29],{"name":18,"type":19},"Check Point","vendor",{"name":21,"type":22},"Security Management Server","product",{"name":24,"type":22},"Log Server",{"name":26,"type":22},"SmartConsole",{"name":28,"type":22},"Smart-1 Cloud",{"name":30,"type":31},"LivePatch","technology","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":32,"icon":34,"name":35,"slug":36},null,"Vulnerabilities","vulnerabilities",[38,40],{"category":39},{"id":32,"icon":34,"name":35,"slug":36},{"category":41},{"id":42,"icon":34,"name":43,"slug":44},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[46],{"type":47,"value":48,"context":49},"cve","CVE-2026-91843","Critical vulnerability in Check Point Security Management and Log Servers",[18,21,24],{"controls":52,"vendors":133},[53,82,111],{"slug":54,"name":55,"problem":56,"products":57},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",[58,66,74],{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","duo","Cisco Duo","https:\u002F\u002Fduo.com\u002F","MFA and device trust, with support for passkeys and security keys.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"slug":83,"name":84,"problem":85,"products":86},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[87,95,103],{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":107,"product_name":108,"url":109,"description":110},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"slug":112,"name":113,"problem":114,"products":115},"patch-management","Automated patch management","Known holes get closed in days, not months.",[116,121,125],{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":117,"product_name":118,"url":119,"description":120},"intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":112,"product_name":122,"url":123,"description":124},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",[134],{"slug":135,"name":18,"logo_path":136,"roles":137},"check-point","\u002Fvendor-logos\u002Fcheck-point.png",[138],"affected",{"slug":140,"title":141,"body":142,"framework_refs":143,"framework_notes":154},"critical-unauthenticated-rce-flaw-in-check-point-management-servers-demands-immediate-patching","Critical Unauthenticated RCE Flaw in Check Point Management Servers Demands Immediate Patching","A stack overflow vulnerability in Check Point's Security Management and Log Servers allows unauthenticated remote attackers to execute arbitrary code as root simply by submitting an overly long username during the login process — no credentials required. With a CVSS score of 9.8, this flaw represents a near-worst-case scenario: complete system compromise of the very infrastructure responsible for managing an organization's security controls. If exploited, an attacker could gain full control over firewall policies, log data, and network segmentation rules, effectively nullifying an organization's entire defensive posture. This incident underscores that security management platforms are high-value targets and must be treated as critical infrastructure with the fastest possible patch cycles and the strictest access restrictions.",[144,145,146,147,148,149,150,151,152,153],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","CIS Control 4: Secure Configuration of Enterprise Assets","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 AC-17: Remote Access","NIST SP 800-53 SC-7: Boundary Protection","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management Planning","ITIL Change Management: Emergency Change Procedures","ISO\u002FIEC 27001:2022 A.8.8: Management of Technical Vulnerabilities","ISO\u002FIEC 27001:2022 A.8.20: Networks Security",{}]