<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-18T13:29:57.476162+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/98d72dcb-36c1-41d4-9004-4a88f38632cd/export</id>
    <title>98d72dcb-36c1-41d4-9004-4a88f38632cd</title>
    <updated>2026-09-18T13:29:57.497976+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "98d72dcb-36c1-41d4-9004-4a88f38632cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-91843", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mvs74ofvuq23", "content": "check point management server: unauth RCE via login handler stack overflow. CVSS 9.8, root impact. patch available\u2026 https://0daynews.com/articles/2026-09-18-check-point-management-cve-2026-91843-rce-root/?utm_source=bluesky&amp;amp;utm_medium=organic_social&amp;amp;utm_campaign=always_on&amp;amp;utm_content=hub-2376", "creation_timestamp": "2026-09-18T12:45:10.534985Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/98d72dcb-36c1-41d4-9004-4a88f38632cd/export"/>
    <published>2026-09-18T12:45:10.534985+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a198a10b-5ea5-456f-b495-50a0f56cbd7a/export</id>
    <title>a198a10b-5ea5-456f-b495-50a0f56cbd7a</title>
    <updated>2026-09-18T13:29:57.500698+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a198a10b-5ea5-456f-b495-50a0f56cbd7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mvs4mq4wtg2q", "content": "Check Point patched CVE-2026-91843, a critical buffer overflow that can let unauthenticated attackers gain root RCE on Security Management Server and Log Server systems. #CheckPoint #CVE202691843 #NCSCNL", "creation_timestamp": "2026-09-18T12:00:28.153947Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a198a10b-5ea5-456f-b495-50a0f56cbd7a/export"/>
    <published>2026-09-18T12:00:28.153947+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/212285bd-992e-474a-8110-8c381b24ea5d/export</id>
    <title>212285bd-992e-474a-8110-8c381b24ea5d</title>
    <updated>2026-09-18T13:29:57.500833+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "212285bd-992e-474a-8110-8c381b24ea5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvrxlqwjd32z", "content": "CVE-2026-91843: Check Point Security Management &amp;amp; Log Server vulnerable to CRITICAL remote code execution as root. Apply patches or restrict access, monitor for admin login failures. https://radar.offseq.com/threat/new-check-point-flaw-lets-hackers-execute-code-with-root-privileges-00056aa571ef00...", "creation_timestamp": "2026-09-18T10:30:26.891687Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/212285bd-992e-474a-8110-8c381b24ea5d/export"/>
    <published>2026-09-18T10:30:26.891687+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/da10d584-0e20-4924-beb0-16a12535897b/export</id>
    <title>da10d584-0e20-4924-beb0-16a12535897b</title>
    <updated>2026-09-18T13:29:57.500943+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "da10d584-0e20-4924-beb0-16a12535897b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117291576457373276", "content": "Check Point Security Mgmt &amp;amp; Log Server face CRITICAL stack buffer overflow (CVE-2026-91843). Remote, unauthenticated RCE as root possible. Patch now or restrict access, monitor for 'Username too long' login failures. https://radar.offseq.com/threat/new-check-point-flaw-lets-hackers-execute-code-with-root-privileges-00056aa571ef0004 #OffSeq #CheckPoint #Vuln #RCE", "creation_timestamp": "2026-09-18T10:30:24.938932Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/da10d584-0e20-4924-beb0-16a12535897b/export"/>
    <published>2026-09-18T10:30:24.938932+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/985128e0-298e-45eb-bb0d-57f0111b99c3/export</id>
    <title>985128e0-298e-45eb-bb0d-57f0111b99c3</title>
    <updated>2026-09-18T13:29:57.501043+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "985128e0-298e-45eb-bb0d-57f0111b99c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://t.me/ctinow/257010", "content": "Check Point Fixes Critical CVE-2026-91843 Allowing Root Code Execution\nhttps://ift.tt/ND7rspz", "creation_timestamp": "2026-09-18T10:00:05.846523Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/985128e0-298e-45eb-bb0d-57f0111b99c3/export"/>
    <published>2026-09-18T10:00:05.846523+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/62beca84-bde1-481b-8c8d-0c5204cc7342/export</id>
    <title>62beca84-bde1-481b-8c8d-0c5204cc7342</title>
    <updated>2026-09-18T13:29:57.501143+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "62beca84-bde1-481b-8c8d-0c5204cc7342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "Telegram/RMFeecNFdeBfqZGCiKRKdmgilxvSr-CdpZBiJXTYBfto56ZU", "content": "", "creation_timestamp": "2026-09-18T10:00:05.799457Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/62beca84-bde1-481b-8c8d-0c5204cc7342/export"/>
    <published>2026-09-18T10:00:05.799457+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a1c7cd40-46ac-4539-a60f-a1d9a7fd16d8/export</id>
    <title>a1c7cd40-46ac-4539-a60f-a1d9a7fd16d8</title>
    <updated>2026-09-18T13:29:57.501238+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a1c7cd40-46ac-4539-a60f-a1d9a7fd16d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://infosec.exchange/users/beyondmachines1/statuses/117291225815473498", "content": "Critical Check Point Management Flaw Allows Unauthenticated Remote Root Access\nCheck Point issued an patch for a critical stack overflow vulnerability (CVE-2026-91843) in its Security Management and Log Servers that allows unauthenticated attackers to gain root-level code execution.\n**If you run Check Point Security Management or Log Servers, make sure they are never reachable from the internet and restrict the Trusted Clients setting so only specific, known admin IP addresses can connect (use a VPN for remote access). Then apply the LivePatch fix released on September 16, 2026 to every management and log server, confirm it installed with `cplp list`, and check your logs for \"Administrator failed to log in: Username too long\" to spot attempted attacks.**#cybersecurity #infosec #advisory #vulnerabilityhttps://beyondmachines.net/event_details/critical-check-point-management-flaw-allows-unauthenticated-remote-root-access-9-x-m-8-o/gD2P6Ple2L", "creation_timestamp": "2026-09-18T09:47:18.008699Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a1c7cd40-46ac-4539-a60f-a1d9a7fd16d8/export"/>
    <published>2026-09-18T09:47:18.008699+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/59deb9d6-62e9-40a4-b8c4-f1a4876c1d24/export</id>
    <title>59deb9d6-62e9-40a4-b8c4-f1a4876c1d24</title>
    <updated>2026-09-18T13:29:57.501346+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "59deb9d6-62e9-40a4-b8c4-f1a4876c1d24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://infosec.exchange/users/cloud/statuses/117290805440362985", "content": "\ud83e\udd16 CVE-2026-91843 (CVSS 9.8): pre-auth stack overflow in Check Point Security Management login process lets unauthenticated attackers run code as root on management/log servers.\nFifth critical unauthenticated management flaw since July. LivePatch fix out; restrict Trusted Clients.\n\ud83d\udd17 https://thehackernews.com/2026/09/critical-check-point-management-server.html#CVE #InfoSec #CyberSec", "creation_timestamp": "2026-09-18T09:46:38.597319Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/59deb9d6-62e9-40a4-b8c4-f1a4876c1d24/export"/>
    <published>2026-09-18T09:46:38.597319+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/21613e4f-e4e8-4e59-aada-eeab0d77e015/export</id>
    <title>21613e4f-e4e8-4e59-aada-eeab0d77e015</title>
    <updated>2026-09-18T13:29:57.501446+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "21613e4f-e4e8-4e59-aada-eeab0d77e015", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mvrqzpryys2c", "content": "Check Point Fixes Critical CVE-2026-91843 Allowing Root Code Execution\n\nsecurityaffairs.com/199279/secur...\n\n#Kyberturvallisuus #ThreatIntel #Haavoittuvuus", "creation_timestamp": "2026-09-18T08:32:59.455670Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/21613e4f-e4e8-4e59-aada-eeab0d77e015/export"/>
    <published>2026-09-18T08:32:59.455670+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9b5a6e7c-41c0-4c32-8a30-40d7f9708499/export</id>
    <title>9b5a6e7c-41c0-4c32-8a30-40d7f9708499</title>
    <updated>2026-09-18T13:29:57.501538+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9b5a6e7c-41c0-4c32-8a30-40d7f9708499", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvrnjvl5uj2a", "content": "CRITICAL: CVE-2026-91843 lets attackers run root code on Check Point Mgmt &amp;amp; Log Server via login. No exploitation yet \u2014 patch now. Tanium &amp;amp; Kaspersky also issue fixes. Details: https://radar.offseq.com/threat/check-point-kaspersky-tanium-patch-product-vulnerabilities-ae8c3757ea9b181a #OffSeq #Vul...", "creation_timestamp": "2026-09-18T07:30:27.547276Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9b5a6e7c-41c0-4c32-8a30-40d7f9708499/export"/>
    <published>2026-09-18T07:30:27.547276+00:00</published>
  </entry>
</feed>
