CVE-2026-91843

☆ pin

CVSS

9.8

Reports

First seen

Sep 17, 2026

Last seen

Sep 23, 2026

Affected product

Check Point Security Management Server, Log Server, Standalone deployments, Multi-Domain servers; R82.20, R82.10 Jumbo Hotfix Take 44 and below, R82 Take 126 and below, R81.20 Take 166 and below, R81.10 Take 190 and below, R81, R80.40, R80.30, R80.20, R80

Associated actors

Handala Hack Team ×1 Qilin ×1 Salt Typhoon ×1 Sandworm ×1 WaterPlum ×1

Recent reports

Critical

Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root

The Hacker NewsSep 17, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Associated actors

Recent reports

InfraTrust report warns network management systems under active attack

Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks

Check Point Threat Intelligence Report – 21 September 2026

Check Point critical RCE flaws enable root code execution on management systems

Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root