Check Point Fixes Critical Flaw Enabling Root-Level Code Execution

Check Point, Kaspersky and Tanium have patched serious vulnerabilities in their security products, including flaws that could enable remote code execution. Check Point disclosed CVE-2026-91843, a critical vulnerability affecting its Security Management and Log Server products. An unauthenticated attacker could exploit the login process to execute arbitrary code with root privileges.

Although attackers have targeted other Check Point flaws, the company said there is no evidence that CVE-2026-91843 has been exploited in the wild. It has nevertheless provided potential indicators of compromise and urged customers without automatic updates to apply the fix immediately.

Tanium issued five advisories covering high- and medium-severity issues. Tanium Asset received fixes for two SQL injection vulnerabilities that authenticated attackers could use to read or alter restricted data, or tamper with SQL queries run by the service. Threat Response was also patched against SQL-query tampering, a server-side request forgery flaw that could expose restricted data, and an improper access-control issue allowing attackers to create or modify alerts.

Separately, Kaspersky’s 17 September advisory said Kaspersky Security 10 for Linux Mail Server is affected by a Redis vulnerability discovered in 2023. Kaspersky said the flaw could potentially cause product malfunction or allow code execution when processing files in a particular format.