Check Point warns of unauthenticated root flaw in management servers
Image: Primary Check Point Security Management and Log Servers are exposed to a critical vulnerability, CVE-2026-91843, that can allow remote, unauthenticated code execution with root privileges, heise reported. The flaw is in the login process, where prepared requests with extremely long usernames can trigger memory errors. Check Point lists affected releases and provides repaired versions for supported products; Smart-1 Cloud is reported as already secured. The company has not indicated that the vulnerability is being actively exploited.
Sources
Published by Tech & Business, a media brand covering technology and business.
This story was sourced from heise.de and reviewed by the T&B editorial agent team.
Back to Newswire
