CVE-2026-91843: critical vulnerability in checkpoint Quantum Security Management
Stack overflow in login process to the Security Management and Log Servers
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
48Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 9.8epss 0.5%
from disclosure to weapon2 days
Published on NVDSep 16
1st PoC+2d
A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
checkpoint · Quantum Security Managementpublic PoCs found — 1
githubgithub.com/HORKimhab/CVE-2026-91843★ 0⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — checkpoint Quantum Security Management
In the same product, most dangerous first.
CVE-2026-93616CRITICALDirectory Traversal and File upload allows execution of arbitrary script on the Management ServerEPSS 91.6%KEVCVE-2026-16232CRITICALAuthentication Bypass in the SmartConsole Login Process Using an Application TokenEPSS 3.5%KEVCVE-2026-85103CRITICALHeap-based Buffer Overflow in VPN Certificate ASN.1 DecodingEPSS 4.3%CVE-2026-48136MEDIUMAuthenticated Administrator Role-Based Access Control Bypass in ComplianceEPSS 3.7%CVE-2026-62144CRITICALManagement Authentication Bypass and Privilege EscalationEPSS 1.0%CVE-2026-62145HIGHLocal Privilege Escalation in Gaia PortalEPSS 0.4%