Search
Find merged stories by title or summary.
Security Affairs newsletter Round 595 by Pierluigi Paganini – INTERNATIONAL EDITION
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. Google Gemini also Broke Out of Its Test Environment AI Helps Hackers Hijack OpenAI Staff Accounts Through a Forum Brevo Supply-Chain Attack Infected Over 100,000 Websites Gyazo Data Breach Exposes 23 Million User Records RatHat Turns Android Accessibility Into an Attack Weapon Check Point Fixes Critical CVE-2026-91843 Allowing Root Code Execution OpenAI admits its models lie to cover their own mistakes Cyberattacks on Oil Tankers Put Maritime Critical Infrastructure at Risk SilkParasite Infrastructure Links SpiceRAT to Central Asian Targets NightmareStresser Goes Offline in Global DDoS-for-Hire Crackdown U. S.
Check Point Fixes Critical CVE-2026-91843 Allowing Root Code Execution
Check Point fixed CVE-2026-91843, a critical flaw that could let attackers run code as root on Security Management and Log Servers with no login needed. Check Point addressed CVE-2026-91843 (CVSS score of 9. 8), a critical vulnerability in its Security Management and Log Servers. The flaw could let an attacker with no account run code as root over the network. The flaw sits in the login process before authentication. Censys researchers found that an attacker can trigger the stack overflow by sending a login request with an extremely long username. “This vulnerability may allow an unauthenticated attacker to remotely execute arbitrary code with root privileges through the login process.” reads the advisory . “At this time, there is no indication that this vulnerability has been exploited in the wild .
Check Point security advisory (AV26-933)
Serial number: AV26-933 Date: September 17, 2026 As of September 16, 2026, Check Point is affected by a vulnerability in the following products: • Security Management Server, Multi-Domain Security Management Server, Log Server and Multi-Domain Log Server • R81.20 with Jumbo Hotfix Take 166 and prior • R82 with Jumbo Hotfix Take 126 and prior • R82.10 with Jumbo Hotfix Take 44 and prior • R82.20 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. • Check Point - sk1000155 - CVE-2026-91843 - Stack overflow in login process to the Security Management and Log Servers • Check Point Security Check Point security advisory (AV26-933) - Canadian Centre for Cyber Security
NVD-CVE-2026-91843 - National Institute of Standards and Technology (.gov)
NVD-CVE-2026-91843 National Institute of Standards and Technology (.gov)
NVD-CVE-2026-91843 - nvd.nist.gov
NVD-CVE-2026-91843 nvd. nist. gov
You've reached the end of current stories for this search.