CVE-2026-91843— Stack overflow in login process to the Security Management and Log Servers
Quick assessment
Affected
checkpoint Quantum Security Management
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在未经身份验证的登录过程中发生的栈溢出，可能允许攻击者以 root 权限远程执行任意代码。
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-91843
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Stack overflow in login process to the Security Management and Log Servers
Source: CVE Program / CVE List V5
Vulnerability Description
A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
栈缓冲区溢出
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| checkpoint | Quantum Security Management | R82.10 with Jumbo Hotfix Take 44 or below | - |
|
II. Public POCs for CVE-2026-91843
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-91843
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-91843 (1)
IV. Related Vulnerabilities
Same vendor: checkpoint
-
CVE-2026-85103
Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding -
CVE-2026-85102
Improper Certificate Validation in Quantum Security Gateway -
CVE-2026-18574
Authentication Bypass in Check Point Security Management Ser -
CVE-2026-62145
Local Privilege Escalation in Gaia Portal -
CVE-2026-62144
Management Authentication Bypass and Privilege Escalation
Same weakness: CWE-121
-
CVE-2026-86358
Dell Update Package Framework 26.07.03前堆栈缓冲区溢出 -
CVE-2026-76869
Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in re -
CVE-2026-76861
Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in nt -
CVE-2026-76860
Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in wa -
CVE-2026-19774
BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution
V. Comments for CVE-2026-91843
No comments yet