Back Securityweek Check Point, Kaspersky, Tanium Patch Product Vulnerabilities
Cybersecurity firms Check Point, Kaspersky, and Tanium have each patched severe vulnerabilities in their products, including ones that can be exploited for remote code execution.
Check Point has informed customers a critical vulnerability affecting Security Management and Log Server products.
The flaw, CVE-2026-91843 , can be exploited by an unauthenticated attacker “to remotely execute arbitrary code with root privileges through the login process.”
Threat actors appear to have set their sights on vulnerabilities in Check Point products in recent months, including zero-days . However, for CVE-2026-91843 the vendor noted that there is no evidence of in-the-wild exploitation. Nevertheless, it has shared some potential indicators of compromise (IoCs).
Check Point has advised customers who don’t have automatic updates enabled to immediately patch their installations.
Tanium published five new advisories this week to inform customers high- and medium-severity vulnerabilities.
In Tanium Asset, the company fixed two high-severity SQL injection vulnerabilities that authenticated attackers can exploit to gain read and write access to restricted data, or tamper with SQL queries executed by the service.
A vulnerability that can be leveraged for SQL query tampering has also been fixed in Threat Response.
Threat Response has also received patches for two medium-severity vulnerabilities: a server-side request forgery allowing access to restricted data, and an improper access control issue that can be exploited to create or modify alerts.
Kaspersky published a new advisory on September 17 to inform users that Kaspersky Security 10 for Linux Mail Server is affected by a Redis vulnerability discovered in 2023.
“The vulnerability could potentially cause product malfunction or allow an attacker to execute code when processing files of a certain format,” Kaspersky explained.
Related : Check Point Patches Critical VPN Vulnerabilities
Related : Trend Micro, Tanium, ESET and Tenable Patch Severe Product Vulnerabilities
Related : Ivanti Patches Critical Flaws Across Enterprise Security Products
Related : Palo Alto Networks Patches 13 Vulnerabilities
Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.
More from Eduard Kovacs
AI Agents Can Retrain Own Models Mid-Task, Leaking Secrets and Erasing Refusals
Pixel Modem Zero-Day Exploited in Targeted Attacks
US, UK, Dutch Agencies Expose Iranian ‘Chosen Brick’ Surveillance Malware
Enterprises Warned of Attacks Exploiting WSO2 Vulnerability
Texas Utility CenterPoint Energy Confirms Breach After Hacker Leaks Data
OpenAI Investigates Report Linking AI Agents to RubyGems Attack
Microsoft AI Code of Conduct Sets Cyberattack Boundaries, Chain of Command, Safety Constraints
Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation
Brevo Supply Chain Attack Injects Malware Into 100,000 Websites
Critical Orkes Conductor Vulnerability Exploited in Attacks
MIND Secures $72 Million for AI-Powered DLP
Cyberattacks on Two Oil Tankers Prompt Coast Guard, FBI to Board Vessels
OpenAI Says Its Models Searched GitHub for Leaked API Keys During Training
CISA Retires Weekly Vulnerability Bulletin in Risk-Based Pivot
Revolut Data Breach: 5 Months, 680 High-Profile Accounts, $3M Ransom
Comp AI Raises $34 Million for AI-Native Compliance and Security
Flipboard Whatsapp Whatsapp Email
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
