A critical Check Point flaw puts management servers on the patch list

The management plane is the target

Check Point disclosed CVE-2026-91843, a stack-based buffer overflow in the unauthenticated login process of its Security Management Server and Log Server products. NVD lists the vendor-assigned CVSS 3.1 score as 9.8 Critical.

The flaw is remotely reachable without credentials or user interaction. Check Point says exploitation could allow arbitrary code execution with root privileges, although it reported no evidence of exploitation in the wild.

The immediate defensive work

The vendor’s September 16 notification directs customers to apply the LivePatch in advisory sk1000155. Affected branches include R82.10, R82, R81.20, and R81.10 within specified Jumbo Hotfix levels; older unsupported branches are also affected according to the CVE record.

A management server is not just another endpoint: it is where policy, administration, and trust converge.

Check Point also recommends limiting Trusted Clients to known internal addresses and avoiding direct internet exposure. Teams should verify the patch rather than assume automatic updates completed successfully.