Check Point, Kaspersky, Tanium Patch Product Vulnerabilities

Cybersecurity firms Check Point, Kaspersky, and Tanium have each patched severe vulnerabilities in their products, including ones that can be exploited for remote code execution.

Check Point has informed customers a critical vulnerability affecting Security Management and Log Server products.

The flaw, CVE-2026-91843 , can be exploited by an unauthenticated attacker “to remotely execute arbitrary code with root privileges through the login process.”

Threat actors appear to have set their sights on vulnerabilities in Check Point products in recent months, including zero-days . However, for CVE-2026-91843 the vendor noted that there is no evidence of in-the-wild exploitation. Nevertheless, it has shared some potential indicators of compromise (IoCs).

Check Point has advised customers who don’t have automatic updates enabled to immediately patch their installations.

Tanium published five new advisories this week to inform customers high- and medium-severity vulnerabilities.

In Tanium Asset, the company fixed two high-severity SQL injection vulnerabilities that authenticated attackers can exploit to gain read and write access to restricted data, or tamper with SQL queries executed by the service.

A vulnerability that can be leveraged for SQL query tampering has also been fixed in Threat Response.

Threat Response has also received patches for two medium-severity vulnerabilities: a server-side request forgery allowing access to restricted data, and an improper access control issue that can be exploited to create or modify alerts.

Kaspersky published a new advisory on September 17 to inform users that Kaspersky Security 10 for Linux Mail Server is affected by a Redis vulnerability discovered in 2023.

“The vulnerability could potentially cause product malfunction or allow an attacker to execute code when processing files of a certain format,” Kaspersky explained.

Related : Check Point Patches Critical VPN Vulnerabilities

Related : Trend Micro, Tanium, ESET and Tenable Patch Severe Product Vulnerabilities

Related : Ivanti Patches Critical Flaws Across Enterprise Security Products

Related : Palo Alto Networks Patches 13 Vulnerabilities

Artificial Intelligence

AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI Code

Hacktron researchers earned a bug bounty after demonstrating access to OpenAI employee accounts.

Artificial Intelligence

Microsoft Patches 18 Vulnerabilities in AI, Cloud Products

Microsoft fixed vulnerabilities across Azure and AI-branded products, with privilege escalation flaws accounting for the majority.

Critical Orkes Conductor Vulnerability Exploited in Attacks

CVE-2026-58138 is an unauthenticated remote code execution vulnerability that attackers can exploit via inline workflow definitions.

CISA Retires Weekly Vulnerability Bulletin in Risk-Based Pivot

The decision follows BOD 26-04, which directs federal organizations to prioritize vulnerabilities based on real-world risk.

ISC Patches 14 Vulnerabilities in BIND 9 Security Update

Attackers could exploit the flaws to increase resource usage, trigger an unexpected program exit, or terminate the named process.

Cisco Fixes Dozens of Flaws Across FMC, ISE and Nexus Dashboard

The vulnerabilities may lead to root access, command execution, bypasses, SQL injection, and remote code execution.

Active Exploitation Triggers Emergency Patch for Cisco ISE Zero-Day

Remote, unauthenticated attackers can exploit the vulnerability to bypass authentication via crafted requests.

Unauthenticated RCE Flaws Could Expose 200,000+ WordPress Sites to Takeover

Vulnerabilities in The Events Calendar can provide attackers with remote code execution capabilities.