CVE-2026-91843 – Check Point Quantum Security Management
“When the system guarding your firewalls can be taken over before anyone logs in, every security policy you run is at risk.”
This update for Check Point Quantum Security Management fixes two Critical flaws that unauthenticated attackers can reach. CVE-2026-91843 has a CVSS score of 9.8, Critical severity. A stack overflow in the login process lets a remote attacker run arbitrary code with root privileges. CVE-2026-93616 has a CVSS score of 9.8, Critical severity. A directory traversal and file upload flaw lets an unauthenticated attacker upload and run arbitrary scripts on the Check Point Management Server, which gives them elevated privileges.
Attackers are actively exploiting CVE-2026-93616. The management server controls security policy for the whole Check Point environment, so a compromise exposes the entire network perimeter. Apply this update immediately.
Key Details
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- None
- CWE Classification
- CWE-121