Check Point Vulnerability (CVE-2026-91843)
Check Point has published an advisory regarding the new critical vulnerability CVE-2026-91843 (CVSS 9.8), which affects the Multi-Domain Security Management Server and Security Management Server products. The vulnerability allows an unauthenticated attacker to remotely execute arbitrary code on the system with root user privileges.
Required Actions
Security updates must be performed, and it must be ensured that the system is updated to at least one of the following versions:
- R82.20 take 29
- R82.10 take 28
- R82 take 28
- R81.20 take 28
If the Check Point LivePatch automatic update service is used, it is necessary to ensure that the updates were performed successfully and that the installation was made using the cplp list command.
In case of a successful update, a list with the comment CVE-2026-91843 will be displayed.
If updates are not possible, the Web interface must be restricted to trusted clients using the Trusted Clients functionality (Manage & Settings > Permissions & Administrators > Trusted Clients).
The vulnerability affects the following versions of the Multi-Domain Security Management Server and Security Management Server:
- R82.20
- R82.10 Jumbo Hotfix Take 44 or lower
- R82 Jumbo Hotfix Take 126 or lower
- R81.20 Jumbo Hotfix Take 166 or lower
- R81.10 Jumbo Hotfix Take 190 or lower (EoS)
- R80, R80.10, R80.20, R80.30, R80.40, R81 (all EoS)
More information: https://support.checkpoint.com/results/sk/sk1000155