Check Point has released a critical security fix for CVE-2026-91843, a stack-based buffer overflow vulnerability that could allow an unauthenticated remote attacker to execute arbitrary code with root privileges on vulnerable security management and logging systems This article explores security fix cve. . The flaw carries a CVSS 3.1 score of 9.8, indicating a network-accessible attack that requires minimal complexity, no privileges, and no user interaction.

Successful exploitation could grant an adversary full operating-system control, potentially exposing management data, security policies, administrator information, and collected logs while enabling further compromise of the protected environment. Vulnerable releases include R82.20, R82.10 with Jumbo Hotfix Take 44 or earlier, R82 with Take 126 or earlier, R81.20 with Take 166 or earlier, and end-of-support R81.10 with Take 190 or earlier.

R80 through R80.40 and R81, which are also end-of-support, remain affected. Defenders should immediately examine SmartConsole Audit and Admin login records for the message “Administrator failed to log in: Username too long.” This entry may indicate an attempt to deliver the oversized input associated with the flaw, but teams should investigate surrounding activity before treating it as proof of successful root-level compromise. Until remediation is confirmed, organizations should restrict SmartConsole Trusted Clients to approved IP addresses or subnets using Manage & Settings, Permissions & Administrators, and Trusted Clients.