[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKSkbVsuhE7589_Zg-rmijxveZ0n-TVAp1AOwXmhrgYA":3},{"article":4,"iocs":45,"watch_terms":62,"solutions":63,"lesson":152},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":27,"category":28,"article_tags":32},"b34c3552-392e-48c1-8530-ef894e6cda39","New Check Point flaw lets hackers execute code with root privileges","new-check-point-flaw-lets-hackers-execute-code-with-root-privileges-9bc8b9","Check Point Software has released security updates to address a critical vulnerability that can let attackers execute code with root privileges on management systems. [...]","Check Point Software has released security updates to address CVE-2026-91843, a critical vulnerability enabling attackers to gain root remote code execution on Security Management Server and Log Server instances. The flaw, a stack-based buffer overflow in the login process, allows unauthenticated attackers to execute code with root privileges in low-complexity attacks. While not yet actively exploited, Check Point has also recently patched other critical flaws, including two authentication bypass zero-days exploited by threat actors.","Check Point releases updates for critical flaw allowing root code execution on management systems.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fcheck-point-warns-critical-flaw-lets-hackers-execute-code-as-root\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F09\u002F18\u002FCheck-Point.jpg","2026-09-18T09:34:33+00:00","2026-09-18T10:00:30.208857+00:00",9,[17,20,23,25],{"name":18,"type":19},"Check Point Software","vendor",{"name":21,"type":22},"Security Management Server","product",{"name":24,"type":22},"Log Server",{"name":26,"type":22},"Security Gateway","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":27,"icon":29,"name":30,"slug":31},null,"Vulnerabilities","vulnerabilities",[33,38,40],{"category":34},{"id":35,"icon":29,"name":36,"slug":37},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":39},{"id":27,"icon":29,"name":30,"slug":31},{"category":41},{"id":42,"icon":29,"name":43,"slug":44},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[46,50,53,56,59],{"type":47,"value":48,"context":49},"cve","CVE-2026-91843","Critical vulnerability in Check Point management systems.",{"type":47,"value":51,"context":52},"CVE-2026-85103","Critical RCE flaw in Check Point VPN certificate ASN.1 decoding.",{"type":47,"value":54,"context":55},"CVE-2026-85102","Critical authentication bypass and RCE flaw in Check Point firewalls.",{"type":47,"value":57,"context":58},"CVE-2026-50751","Authentication bypass zero-day exploited by Qilin ransomware affiliate.",{"type":47,"value":60,"context":61},"CVE-2026-16232","Authentication bypass zero-day exploited for administrator privileges.",[18,21,24],{"controls":64,"vendors":145},[65,94,123],{"slug":66,"name":67,"problem":68,"products":69},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[70,78,86],{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":74,"product_name":75,"url":76,"description":77},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-identity","Microsoft Defender for Identity","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-for-identity","Detects attacks against on-premises Active Directory and hybrid identities.",{"vendor_slug":79,"vendor_name":80,"vendor_logo":81,"product_slug":82,"product_name":83,"url":84,"description":85},"acalvio","Acalvio","\u002Fvendor-logos\u002Facalvio.png","shadowplex-identity-protection","ShadowPlex Identity Protection","https:\u002F\u002Fwww.acalvio.com\u002Fproducts\u002Fidentity-protection\u002F","Decoy accounts and credentials that expose identity attacks and credential misuse early.",{"vendor_slug":87,"vendor_name":88,"vendor_logo":89,"product_slug":90,"product_name":91,"url":92,"description":93},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-itdr","Huntress Managed ITDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-itdr","Managed detection of suspicious activity in Microsoft 365 and Entra ID.",{"slug":95,"name":96,"problem":97,"products":98},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[99,107,115],{"vendor_slug":100,"vendor_name":101,"vendor_logo":102,"product_slug":103,"product_name":104,"url":105,"description":106},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":108,"vendor_name":109,"vendor_logo":110,"product_slug":111,"product_name":112,"url":113,"description":114},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":116,"vendor_name":117,"vendor_logo":118,"product_slug":119,"product_name":120,"url":121,"description":122},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":124,"name":125,"problem":126,"products":127},"patch-management","Automated patch management","Known holes get closed in days, not months.",[128,136,141],{"vendor_slug":129,"vendor_name":130,"vendor_logo":131,"product_slug":132,"product_name":133,"url":134,"description":135},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":137,"product_name":138,"url":139,"description":140},"intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":108,"vendor_name":109,"vendor_logo":110,"product_slug":124,"product_name":142,"url":143,"description":144},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",[146],{"slug":147,"name":148,"logo_path":149,"roles":150},"check-point","Check Point","\u002Fvendor-logos\u002Fcheck-point.png",[151],"affected",{"slug":153,"title":154,"body":155,"framework_refs":156,"framework_notes":167},"critical-root-rce-flaw-in-check-point-security-servers-demands-immediate-patching","Critical Root RCE Flaw in Check Point Security Servers Demands Immediate Patching","A stack-based buffer overflow in Check Point's login process (CVE-2026-91843) allows unauthenticated attackers to execute arbitrary code with root privileges on Security Management and Log Servers — requiring no credentials and minimal technical complexity. This is particularly alarming because the affected systems are security infrastructure themselves, meaning a successful compromise could grant attackers control over an organization's entire security posture. The fact that Check Point has recently patched multiple critical flaws, including two actively exploited zero-days, suggests a pattern of exposure that demands urgent attention. Organizations running unpatched instances face the risk of full network compromise originating from the very tools designed to protect them.",[157,158,159,160,161,162,163,164,165,166],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","CIS Control 4: Secure Configuration of Enterprise Assets","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management","NIST SI-2: Flaw Remediation","NIST SC-7: Boundary Protection","NIST AC-3: Access Enforcement","NIST RA-5: Vulnerability Monitoring and Scanning","ISO\u002FIEC 27001:2022 A.8.8: Management of Technical Vulnerabilities","ITIL: Change and Release Management (Emergency Change Procedure)",{}]