<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 18 Sep 2026 14:55:40 +0000</lastBuildDate>
    <item>
      <title>5419dcb2-efe3-4d4e-8542-6dfbaf5e25ba</title>
      <link>https://vulnerability.circl.lu/sighting/5419dcb2-efe3-4d4e-8542-6dfbaf5e25ba/export</link>
      <description>{"uuid": "5419dcb2-efe3-4d4e-8542-6dfbaf5e25ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://t.me/CyberSecurityIL/9510", "content": "\u05d5\u05e2\u05d5\u05d3 \u05d0\u05d7\u05ea:\n\u26d4\ud83d\ude00 \u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1\u05e6'\u05e7\u05e4\u05d5\u05d9\u05e0\u05d8 \u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05dc\u05ea\u05d5\u05e7\u05e3 \u05dc\u05d4\u05e8\u05d9\u05e5 \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 \u05e2\u05dd \u05d4\u05e8\u05e9\u05d0\u05d5\u05ea \u05d0\u05d3\u05de\u05d9\u05df.\n\n\u05e4\u05e8\u05d8\u05d9\u05dd \u05e0\u05d5\u05e1\u05e4\u05d9\u05dd \u05e2\u05dc \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 CVE-2026-91843, \u05d4\u05e4\u05d0\u05e6', \u05d4\u05d3\u05e8\u05da \u05dc\u05d0\u05ea\u05e8 \u05d0\u05dd \u05d4\u05d5\u05ea\u05e7\u05e4\u05ea\u05dd \u05d5\u05e2\u05d5\u05d3, \u05d1\u05d4\u05d5\u05d3\u05e2\u05d4 \u05e9\u05dc \u05e6'\u05e7\u05e4\u05d5\u05d9\u05e0\u05d8.\n\nhttps://t.me/CyberSecurityIL/9510", "creation_timestamp": "2026-09-18T14:00:03.858805Z"}</description>
      <content:encoded>{"uuid": "5419dcb2-efe3-4d4e-8542-6dfbaf5e25ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://t.me/CyberSecurityIL/9510", "content": "\u05d5\u05e2\u05d5\u05d3 \u05d0\u05d7\u05ea:\n\u26d4\ud83d\ude00 \u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1\u05e6'\u05e7\u05e4\u05d5\u05d9\u05e0\u05d8 \u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05dc\u05ea\u05d5\u05e7\u05e3 \u05dc\u05d4\u05e8\u05d9\u05e5 \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 \u05e2\u05dd \u05d4\u05e8\u05e9\u05d0\u05d5\u05ea \u05d0\u05d3\u05de\u05d9\u05df.\n\n\u05e4\u05e8\u05d8\u05d9\u05dd \u05e0\u05d5\u05e1\u05e4\u05d9\u05dd \u05e2\u05dc \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 CVE-2026-91843, \u05d4\u05e4\u05d0\u05e6', \u05d4\u05d3\u05e8\u05da \u05dc\u05d0\u05ea\u05e8 \u05d0\u05dd \u05d4\u05d5\u05ea\u05e7\u05e4\u05ea\u05dd \u05d5\u05e2\u05d5\u05d3, \u05d1\u05d4\u05d5\u05d3\u05e2\u05d4 \u05e9\u05dc \u05e6'\u05e7\u05e4\u05d5\u05d9\u05e0\u05d8.\n\nhttps://t.me/CyberSecurityIL/9510", "creation_timestamp": "2026-09-18T14:00:03.858805Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5419dcb2-efe3-4d4e-8542-6dfbaf5e25ba/export</guid>
      <pubDate>Fri, 18 Sep 2026 14:00:03 +0000</pubDate>
    </item>
    <item>
      <title>98d72dcb-36c1-41d4-9004-4a88f38632cd</title>
      <link>https://vulnerability.circl.lu/sighting/98d72dcb-36c1-41d4-9004-4a88f38632cd/export</link>
      <description>{"uuid": "98d72dcb-36c1-41d4-9004-4a88f38632cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-91843", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mvs74ofvuq23", "content": "check point management server: unauth RCE via login handler stack overflow. CVSS 9.8, root impact. patch available\u2026 https://0daynews.com/articles/2026-09-18-check-point-management-cve-2026-91843-rce-root/?utm_source=bluesky&amp;amp;utm_medium=organic_social&amp;amp;utm_campaign=always_on&amp;amp;utm_content=hub-2376", "creation_timestamp": "2026-09-18T12:45:10.534985Z"}</description>
      <content:encoded>{"uuid": "98d72dcb-36c1-41d4-9004-4a88f38632cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-91843", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mvs74ofvuq23", "content": "check point management server: unauth RCE via login handler stack overflow. CVSS 9.8, root impact. patch available\u2026 https://0daynews.com/articles/2026-09-18-check-point-management-cve-2026-91843-rce-root/?utm_source=bluesky&amp;amp;utm_medium=organic_social&amp;amp;utm_campaign=always_on&amp;amp;utm_content=hub-2376", "creation_timestamp": "2026-09-18T12:45:10.534985Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/98d72dcb-36c1-41d4-9004-4a88f38632cd/export</guid>
      <pubDate>Fri, 18 Sep 2026 12:45:10 +0000</pubDate>
    </item>
    <item>
      <title>a198a10b-5ea5-456f-b495-50a0f56cbd7a</title>
      <link>https://vulnerability.circl.lu/sighting/a198a10b-5ea5-456f-b495-50a0f56cbd7a/export</link>
      <description>{"uuid": "a198a10b-5ea5-456f-b495-50a0f56cbd7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mvs4mq4wtg2q", "content": "Check Point patched CVE-2026-91843, a critical buffer overflow that can let unauthenticated attackers gain root RCE on Security Management Server and Log Server systems. #CheckPoint #CVE202691843 #NCSCNL", "creation_timestamp": "2026-09-18T12:00:28.153947Z"}</description>
      <content:encoded>{"uuid": "a198a10b-5ea5-456f-b495-50a0f56cbd7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mvs4mq4wtg2q", "content": "Check Point patched CVE-2026-91843, a critical buffer overflow that can let unauthenticated attackers gain root RCE on Security Management Server and Log Server systems. #CheckPoint #CVE202691843 #NCSCNL", "creation_timestamp": "2026-09-18T12:00:28.153947Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a198a10b-5ea5-456f-b495-50a0f56cbd7a/export</guid>
      <pubDate>Fri, 18 Sep 2026 12:00:28 +0000</pubDate>
    </item>
    <item>
      <title>212285bd-992e-474a-8110-8c381b24ea5d</title>
      <link>https://vulnerability.circl.lu/sighting/212285bd-992e-474a-8110-8c381b24ea5d/export</link>
      <description>{"uuid": "212285bd-992e-474a-8110-8c381b24ea5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvrxlqwjd32z", "content": "CVE-2026-91843: Check Point Security Management &amp;amp; Log Server vulnerable to CRITICAL remote code execution as root. Apply patches or restrict access, monitor for admin login failures. https://radar.offseq.com/threat/new-check-point-flaw-lets-hackers-execute-code-with-root-privileges-00056aa571ef00...", "creation_timestamp": "2026-09-18T10:30:26.891687Z"}</description>
      <content:encoded>{"uuid": "212285bd-992e-474a-8110-8c381b24ea5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvrxlqwjd32z", "content": "CVE-2026-91843: Check Point Security Management &amp;amp; Log Server vulnerable to CRITICAL remote code execution as root. Apply patches or restrict access, monitor for admin login failures. https://radar.offseq.com/threat/new-check-point-flaw-lets-hackers-execute-code-with-root-privileges-00056aa571ef00...", "creation_timestamp": "2026-09-18T10:30:26.891687Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/212285bd-992e-474a-8110-8c381b24ea5d/export</guid>
      <pubDate>Fri, 18 Sep 2026 10:30:26 +0000</pubDate>
    </item>
    <item>
      <title>da10d584-0e20-4924-beb0-16a12535897b</title>
      <link>https://vulnerability.circl.lu/sighting/da10d584-0e20-4924-beb0-16a12535897b/export</link>
      <description>{"uuid": "da10d584-0e20-4924-beb0-16a12535897b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117291576457373276", "content": "Check Point Security Mgmt &amp;amp; Log Server face CRITICAL stack buffer overflow (CVE-2026-91843). Remote, unauthenticated RCE as root possible. Patch now or restrict access, monitor for 'Username too long' login failures. https://radar.offseq.com/threat/new-check-point-flaw-lets-hackers-execute-code-with-root-privileges-00056aa571ef0004 #OffSeq #CheckPoint #Vuln #RCE", "creation_timestamp": "2026-09-18T10:30:24.938932Z"}</description>
      <content:encoded>{"uuid": "da10d584-0e20-4924-beb0-16a12535897b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117291576457373276", "content": "Check Point Security Mgmt &amp;amp; Log Server face CRITICAL stack buffer overflow (CVE-2026-91843). Remote, unauthenticated RCE as root possible. Patch now or restrict access, monitor for 'Username too long' login failures. https://radar.offseq.com/threat/new-check-point-flaw-lets-hackers-execute-code-with-root-privileges-00056aa571ef0004 #OffSeq #CheckPoint #Vuln #RCE", "creation_timestamp": "2026-09-18T10:30:24.938932Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/da10d584-0e20-4924-beb0-16a12535897b/export</guid>
      <pubDate>Fri, 18 Sep 2026 10:30:24 +0000</pubDate>
    </item>
    <item>
      <title>985128e0-298e-45eb-bb0d-57f0111b99c3</title>
      <link>https://vulnerability.circl.lu/sighting/985128e0-298e-45eb-bb0d-57f0111b99c3/export</link>
      <description>{"uuid": "985128e0-298e-45eb-bb0d-57f0111b99c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://t.me/ctinow/257010", "content": "Check Point Fixes Critical CVE-2026-91843 Allowing Root Code Execution\nhttps://ift.tt/ND7rspz", "creation_timestamp": "2026-09-18T10:00:05.846523Z"}</description>
      <content:encoded>{"uuid": "985128e0-298e-45eb-bb0d-57f0111b99c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://t.me/ctinow/257010", "content": "Check Point Fixes Critical CVE-2026-91843 Allowing Root Code Execution\nhttps://ift.tt/ND7rspz", "creation_timestamp": "2026-09-18T10:00:05.846523Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/985128e0-298e-45eb-bb0d-57f0111b99c3/export</guid>
      <pubDate>Fri, 18 Sep 2026 10:00:05 +0000</pubDate>
    </item>
    <item>
      <title>62beca84-bde1-481b-8c8d-0c5204cc7342</title>
      <link>https://vulnerability.circl.lu/sighting/62beca84-bde1-481b-8c8d-0c5204cc7342/export</link>
      <description>{"uuid": "62beca84-bde1-481b-8c8d-0c5204cc7342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "Telegram/RMFeecNFdeBfqZGCiKRKdmgilxvSr-CdpZBiJXTYBfto56ZU", "content": "", "creation_timestamp": "2026-09-18T10:00:05.799457Z"}</description>
      <content:encoded>{"uuid": "62beca84-bde1-481b-8c8d-0c5204cc7342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "Telegram/RMFeecNFdeBfqZGCiKRKdmgilxvSr-CdpZBiJXTYBfto56ZU", "content": "", "creation_timestamp": "2026-09-18T10:00:05.799457Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/62beca84-bde1-481b-8c8d-0c5204cc7342/export</guid>
      <pubDate>Fri, 18 Sep 2026 10:00:05 +0000</pubDate>
    </item>
    <item>
      <title>a1c7cd40-46ac-4539-a60f-a1d9a7fd16d8</title>
      <link>https://vulnerability.circl.lu/sighting/a1c7cd40-46ac-4539-a60f-a1d9a7fd16d8/export</link>
      <description>{"uuid": "a1c7cd40-46ac-4539-a60f-a1d9a7fd16d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://infosec.exchange/users/beyondmachines1/statuses/117291225815473498", "content": "Critical Check Point Management Flaw Allows Unauthenticated Remote Root Access\nCheck Point issued an patch for a critical stack overflow vulnerability (CVE-2026-91843) in its Security Management and Log Servers that allows unauthenticated attackers to gain root-level code execution.\n**If you run Check Point Security Management or Log Servers, make sure they are never reachable from the internet and restrict the Trusted Clients setting so only specific, known admin IP addresses can connect (use a VPN for remote access). Then apply the LivePatch fix released on September 16, 2026 to every management and log server, confirm it installed with `cplp list`, and check your logs for \"Administrator failed to log in: Username too long\" to spot attempted attacks.**#cybersecurity #infosec #advisory #vulnerabilityhttps://beyondmachines.net/event_details/critical-check-point-management-flaw-allows-unauthenticated-remote-root-access-9-x-m-8-o/gD2P6Ple2L", "creation_timestamp": "2026-09-18T09:47:18.008699Z"}</description>
      <content:encoded>{"uuid": "a1c7cd40-46ac-4539-a60f-a1d9a7fd16d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://infosec.exchange/users/beyondmachines1/statuses/117291225815473498", "content": "Critical Check Point Management Flaw Allows Unauthenticated Remote Root Access\nCheck Point issued an patch for a critical stack overflow vulnerability (CVE-2026-91843) in its Security Management and Log Servers that allows unauthenticated attackers to gain root-level code execution.\n**If you run Check Point Security Management or Log Servers, make sure they are never reachable from the internet and restrict the Trusted Clients setting so only specific, known admin IP addresses can connect (use a VPN for remote access). Then apply the LivePatch fix released on September 16, 2026 to every management and log server, confirm it installed with `cplp list`, and check your logs for \"Administrator failed to log in: Username too long\" to spot attempted attacks.**#cybersecurity #infosec #advisory #vulnerabilityhttps://beyondmachines.net/event_details/critical-check-point-management-flaw-allows-unauthenticated-remote-root-access-9-x-m-8-o/gD2P6Ple2L", "creation_timestamp": "2026-09-18T09:47:18.008699Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a1c7cd40-46ac-4539-a60f-a1d9a7fd16d8/export</guid>
      <pubDate>Fri, 18 Sep 2026 09:47:18 +0000</pubDate>
    </item>
    <item>
      <title>59deb9d6-62e9-40a4-b8c4-f1a4876c1d24</title>
      <link>https://vulnerability.circl.lu/sighting/59deb9d6-62e9-40a4-b8c4-f1a4876c1d24/export</link>
      <description>{"uuid": "59deb9d6-62e9-40a4-b8c4-f1a4876c1d24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://infosec.exchange/users/cloud/statuses/117290805440362985", "content": "\ud83e\udd16 CVE-2026-91843 (CVSS 9.8): pre-auth stack overflow in Check Point Security Management login process lets unauthenticated attackers run code as root on management/log servers.\nFifth critical unauthenticated management flaw since July. LivePatch fix out; restrict Trusted Clients.\n\ud83d\udd17 https://thehackernews.com/2026/09/critical-check-point-management-server.html#CVE #InfoSec #CyberSec", "creation_timestamp": "2026-09-18T09:46:38.597319Z"}</description>
      <content:encoded>{"uuid": "59deb9d6-62e9-40a4-b8c4-f1a4876c1d24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://infosec.exchange/users/cloud/statuses/117290805440362985", "content": "\ud83e\udd16 CVE-2026-91843 (CVSS 9.8): pre-auth stack overflow in Check Point Security Management login process lets unauthenticated attackers run code as root on management/log servers.\nFifth critical unauthenticated management flaw since July. LivePatch fix out; restrict Trusted Clients.\n\ud83d\udd17 https://thehackernews.com/2026/09/critical-check-point-management-server.html#CVE #InfoSec #CyberSec", "creation_timestamp": "2026-09-18T09:46:38.597319Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/59deb9d6-62e9-40a4-b8c4-f1a4876c1d24/export</guid>
      <pubDate>Fri, 18 Sep 2026 09:46:38 +0000</pubDate>
    </item>
    <item>
      <title>21613e4f-e4e8-4e59-aada-eeab0d77e015</title>
      <link>https://vulnerability.circl.lu/sighting/21613e4f-e4e8-4e59-aada-eeab0d77e015/export</link>
      <description>{"uuid": "21613e4f-e4e8-4e59-aada-eeab0d77e015", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mvrqzpryys2c", "content": "Check Point Fixes Critical CVE-2026-91843 Allowing Root Code Execution\n\nsecurityaffairs.com/199279/secur...\n\n#Kyberturvallisuus #ThreatIntel #Haavoittuvuus", "creation_timestamp": "2026-09-18T08:32:59.455670Z"}</description>
      <content:encoded>{"uuid": "21613e4f-e4e8-4e59-aada-eeab0d77e015", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-91843", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mvrqzpryys2c", "content": "Check Point Fixes Critical CVE-2026-91843 Allowing Root Code Execution\n\nsecurityaffairs.com/199279/secur...\n\n#Kyberturvallisuus #ThreatIntel #Haavoittuvuus", "creation_timestamp": "2026-09-18T08:32:59.455670Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/21613e4f-e4e8-4e59-aada-eeab0d77e015/export</guid>
      <pubDate>Fri, 18 Sep 2026 08:32:59 +0000</pubDate>
    </item>
  </channel>
</rss>
