CVE-2026-91843

criticalpriority · track · 10EPSS 0.005 · 44 %ileexploit · PoCNLRU

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

1 exploit · PoC

Likely / severe?

0.52% (44th) EPSS

CVSS 9.8 · critical

Is it mine?

24 products

Check your exposure

Who says so?

2 sources

fstec_bdu · ncsc_nl

EPSS · scored 2026-10-27

A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges.

cvss

Technical severity, 0–10. One row per scoring source.

9.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.19.8criticalAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · cve@checkpoint.comexploitability 3.9 · impact 5.9

v3.19.3criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Psecondary · CVSS-BT (t0sche)

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · NCSC-NL NL

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-121USCWE-121USCWE-121US

exploits (1)

Public proof-of-concept and weaponised exploit code.

HORKimhab/CVE-2026-91843CVE-2026-91843 - Draft or TODOPoC · poc_in_github

affected products (24)

Products and version ranges known to be affected.

Check Point Software Technologies Ltd. Multi-Domain Security Management Server (MDS)≤ R81fstec_bduRU
Check Point Software Technologies Ltd. Multi-Domain Security Management Server (MDS)≤ R82.20fstec_bduRU
Check Point Software Technologies Ltd. Multi-Domain Security Management Server (MDS)≤ R82.10 Jumbo Hotfix Take 44fstec_bduRU
Check Point Software Technologies Ltd. Multi-Domain Security Management Server (MDS)≤ R82 Jumbo Hotfix Take 126fstec_bduRU
Check Point Software Technologies Ltd. Multi-Domain Security Management Server (MDS)≤ R81.20 Jumbo Hotfix Take 166fstec_bduRU
Check Point Software Technologies Ltd. Multi-Domain Security Management Server (MDS)≤ R81.10 Jumbo Hotfix Take 190fstec_bduRU
Check Point Software Technologies Ltd. Multi-Domain Security Management Server (MDS)≤ R80fstec_bduRU
Check Point Software Technologies Ltd. Multi-Domain Security Management Server (MDS)≤ R80.10fstec_bduRU
Check Point Software Technologies Ltd. Multi-Domain Security Management Server (MDS)≤ R80.20fstec_bduRU
Check Point Software Technologies Ltd. Multi-Domain Security Management Server (MDS)≤ R80.30fstec_bduRU
Check Point Software Technologies Ltd. Multi-Domain Security Management Server (MDS)≤ R80.40fstec_bduRU
Check Point Software Technologies Ltd. Security Management Server≤ R82.20fstec_bduRU
Check Point Software Technologies Ltd. Security Management Server≤ R82.10 Jumbo Hotfix Take 44fstec_bduRU
Check Point Software Technologies Ltd. Security Management Server≤ R82 Jumbo Hotfix Take 126fstec_bduRU
Check Point Software Technologies Ltd. Security Management Server≤ R81.20 Jumbo Hotfix Take 166fstec_bduRU
Check Point Software Technologies Ltd. Security Management Server≤ R81.10 Jumbo Hotfix Take 190fstec_bduRU
Check Point Software Technologies Ltd. Security Management Server≤ R80fstec_bduRU
Check Point Software Technologies Ltd. Security Management Server≤ R80.10fstec_bduRU
Check Point Software Technologies Ltd. Security Management Server≤ R80.20fstec_bduRU
Check Point Software Technologies Ltd. Security Management Server≤ R80.30fstec_bduRU

showing 20 of 24

advisories (1)

Vendor and ecosystem advisories describing this.

NCSC-2026-0384Kwetsbaarheid verholpen in Check Point's Security Management and Log ServersNL2026-09-18csaf · ncsc_nlNL
Check Point heeft een kwetsbaarheid verholpen in Check Point's Security Management and Log Servers.

also known as (1)

Other names and identifiers for this entity.

BDU:2026-14921 fstec_bdu

sources

Which sources assert this record, and when.

fstec_bdu ncsc_nl NVD CVE.org MITRE

published 2026-09-16modified 2026-09-19

references (1) nvd

External citations — patches, advisories, analysis.

https://support.checkpoint.com/results/sk/sk1000155

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan