Skip to content
VulniPulse
Sign in
Advisory severityCritical9.8Check Point

Critical [CVE-2026-91843] Stack overflow in login process to the Security Management and Log Servers

This critical-severity Check Point advisory covers CVE-2026-91843 affecting Quantum Security Management, Multi-Domain Security Management Server.

Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.

CVE-2026-91843 Source published Source updated

VulniPulse record published

CVE-2026-91843
Affected products & platforms
Check PointQuantum Gateway / GaiaSecurity Management
Open source advisory

Android app · Google Play

Monitor future Check Point CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features

Summary

Issue: A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges. This issue received the ID CVE-2026-91843 and a CVSS score of 9.8.

Affected Products: Security Management Server, Multi-Domain Security Management Server, Log Server, Multi-Domain Log Server. Note: The Smart-1 Cloud environment is not affected because the fix has already been implemented there.

Affected Versions: R82.20 R82.10 Jumbo Hotfix Take 44 or lower R82 Jumbo Hotfix Take 126 or lower R81.20 Jumbo Hotfix Take 166 or lower R81.10 Jumbo Hotfix Take 190 or lower (EoS) R80, R80.10, R80.20, R80.30, R80.40, R81 (all EoS) How to identify an attackIn SmartConsole, search for Audit and Admin login logs containing the message: "Administrator failed to log in: Username too long".Mitigation Follow the Check Point Gateway and Management Hardening Administration Guide.

Limit Trusted Clients (GUI clients) to trusted IP addresses/subnets. To do so, In SmartConsole, go to Manage & Settings > Permissions & Administrators > Trusted Clients.

Double-click the client you want to edit. In the Trusted Client configuration window that opens, change the settings as needed.

Make sure do not to use "Any" as a Client Type.

Affected products named by the advisory: Quantum Security Management.

Affected versions
  • Quantum Security Management R82.10 with Jumbo Hotfix Take 44 or below
  • Quantum Security Management R82 with Jumbo Hotfix Take 126 or below
  • Quantum Security Management R81.20 with Jumbo Hotfix Take 166 or below
  • Quantum Security Management R81.10 (EOS) with Jumbo Hotfix Take 190 or below
  • Quantum Security Management R81 (EOS)
  • Quantum Security Management R80.40 (EOS)
  • Quantum Security Management R80.30 (EOS)
  • Quantum Security Management R80.20 (EOS)
  • Quantum Security Management R80.10 (EOS)
  • Quantum Security Management R80 (EOS)

Official advisory · high-confidence parse· fetched 28 days ago·verify at source

Fixed versions
  • R82.10 Jumbo Hotfix Accumulator Take 45 or later
  • R82 Jumbo Hotfix Accumulator Take 127 or later
  • R81.20 Jumbo Hotfix Accumulator Take 170 or later
  • R81.10 Jumbo Hotfix Accumulator Take 192 or later

Official advisory · high-confidence parse· fetched 28 days ago·verify at source

Mitigation checklist

Recommended fix / mitigation
  • This problem was fixed. The fix is included in Check Point LivePatch. If you have enabled automatic updates according to sk175504, you are automatically protected. Manual Check Point LivePatch installation Download the offline package from the table below: Version Take Number Download Package R82.20 BUNDLE_URGENT_SECURITY_UPDATE_R82_10_AUTOUPDATE take 29 (TAR) R82.10 BUNDLE_URGENT_SECURITY_UPDATE_R82_10_AUTOUPDATE take 28 (TAR) R82 BUNDLE_URGENT_SECURITY_UPDATE_R82_AUTOUPDATE take 28 (TAR) R81.20 BUNDLE_URGENT_SECURITY_UPDATE_R81_20_AUTOUPDATE take 28 (TAR) For instructions on the offline package installation procedure, refer to sk185114. This LivePatch should be installed on all Security Management / Multi-Domain Security Management / Log Servers. For LivePatch validation, run in Expert mode on the Security Management Server / Log Server: cplp list Expected output: [Expert@MGMT]# cplp listID(PATCH:PROC) STATUS MODE COMMENT--------------------------------------------------------------------------fwm:fwm armed livepatch CVE-2026-91843 The fix is also included in: Jumbo Hotfix Accumulator for R82.10 starting from Take 45 Jumbo Hotfix Accumulator for R82 starting from Take 127 Jumbo Hotfix Accumulator for R81.20 starting from Take 170 Jumbo Hotfix Accumulator for R81.10 starting from Take 192

Official advisory · high-confidence parse· fetched 28 days ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

Sign in to join the discussion.