CVE-2026-91843 - Vulnerability Details - OpenCVE

A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact total

Vendors	Products
Checkpoint	Quantum Security Management

No data.

No data.

References

Link	Providers
https://support.checkpoint.com/results/sk/sk1000155

History

Fri, 18 Sep 2026 03:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Thu, 17 Sep 2026 05:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Checkpoint Checkpoint quantum Security Management
Vendors & Products		Checkpoint Checkpoint quantum Security Management

Wed, 16 Sep 2026 13:30:00 +0000

Type	Values Removed	Values Added
Description		A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges.
Title		Stack overflow in login process to the Security Management and Log Servers
Weaknesses		CWE-121
References		https://support.checkpoint.com/results/sk/sk1000155
Metrics		cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: checkpoint

Published: 2026-09-16T13:03:40.553Z

Updated: 2026-09-17T11:39:25.299Z

Reserved: 2026-09-15T08:30:18.206Z

Link: CVE-2026-91843

Vulnrichment

Updated: 2026-09-17T11:32:25.433Z

NVD

Status : Awaiting Analysis

Published: 2026-09-16T14:17:13.947

Modified: 2026-09-18T19:34:36.657

Link: CVE-2026-91843

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-91843", "assignerOrgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45", "state": "PUBLISHED", "assignerShortName": "checkpoint", "dateReserved": "2026-09-15T08:30:18.206Z", "datePublished": "2026-09-16T13:03:40.553Z", "dateUpdated": "2026-09-17T11:39:25.299Z"}, "containers": {"cna": {"affected": [{"product": "Quantum Security Management", "vendor": "checkpoint", "versions": [{"status": "affected", "version": "R82.10 with Jumbo Hotfix Take 44 or below"}, {"status": "affected", "version": "R82 with Jumbo Hotfix Take 126 or below"}, {"status": "affected", "version": "R81.20 with Jumbo Hotfix Take 166 or below"}, {"status": "affected", "version": "R81.10 (EOS) with Jumbo Hotfix Take 190 or below"}, {"status": "affected", "version": "R81 (EOS)"}, {"status": "affected", "version": "R80.40 (EOS)"}, {"status": "affected", "version": "R80.30 (EOS)"}, {"status": "affected", "version": "R80.20 (EOS)"}, {"status": "affected", "version": "R80.10 (EOS)"}, {"status": "affected", "version": "R80 (EOS)"}]}], "title": "Stack overflow in login process to the Security Management and Log Servers", "descriptions": [{"lang": "en", "value": "A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-121", "description": "CWE-121: Stack-based Buffer Overflow.", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45", "shortName": "checkpoint", "dateUpdated": "2026-09-16T13:03:40.553Z"}, "references": [{"url": "https://support.checkpoint.com/results/sk/sk1000155"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}], "x_generator": {"engine": "cvelib 1.8.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-91843", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-09-17T03:56:52.301574Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-17T11:39:25.299Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"cna": {"title": "Stack overflow in login process to the Security Management and Log Servers", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "checkpoint", "product": "Quantum Security Management", "versions": [{"status": "affected", "version": "R82.10 with Jumbo Hotfix Take 44 or below"}, {"status": "affected", "version": "R82 with Jumbo Hotfix Take 126 or below"}, {"status": "affected", "version": "R81.20 with Jumbo Hotfix Take 166 or below"}, {"status": "affected", "version": "R81.10 (EOS) with Jumbo Hotfix Take 190 or below"}, {"status": "affected", "version": "R81 (EOS)"}, {"status": "affected", "version": "R80.40 (EOS)"}, {"status": "affected", "version": "R80.30 (EOS)"}, {"status": "affected", "version": "R80.20 (EOS)"}, {"status": "affected", "version": "R80.10 (EOS)"}, {"status": "affected", "version": "R80 (EOS)"}]}], "references": [{"url": "https://support.checkpoint.com/results/sk/sk1000155"}], "x_generator": {"engine": "cvelib 1.8.0"}, "descriptions": [{"lang": "en", "value": "A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-121", "description": "CWE-121: Stack-based Buffer Overflow."}]}], "providerMetadata": {"orgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45", "shortName": "checkpoint", "dateUpdated": "2026-09-16T13:03:40.553Z"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-91843", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-09-17T03:56:52.301574Z"}}}], "providerMetadata": {"shortName": "CISA-ADP", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "dateUpdated": "2026-09-17T11:32:25.433Z"}}]}, "cveMetadata": {"cveId": "CVE-2026-91843", "state": "PUBLISHED", "dateUpdated": "2026-09-16T13:03:40.553Z", "dateReserved": "2026-09-15T08:30:18.206Z", "assignerOrgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45", "datePublished": "2026-09-16T13:03:40.553Z", "assignerShortName": "checkpoint"}, "dataVersion": "5.2"}