New Check Point flaw lets hackers execute code with root privileges

A stack-based buffer overflow in Check Point's login process (CVE-2026-91843) allows unauthenticated attackers to execute arbitrary code with root privileges on Security Management and Log Servers — requiring no credentials and minimal technical complexity. This is particularly alarming because the affected systems are security infrastructure themselves, meaning a successful compromise could grant attackers control over an organization's entire security posture. The fact that Check Point has recently patched multiple critical flaws, including two actively exploited zero-days, suggests a pattern of exposure that demands urgent attention. Organizations running unpatched instances face the risk of full network compromise originating from the very tools designed to protect them.