Critical Vulnerabilities Patched in Check Point, Kaspersky, and Tanium Products

• •Check Point's CVE-2026-91843 allows remote code execution with root privileges.
• •Tanium fixed multiple high-severity SQL injection vulnerabilities this week.
• •Kaspersky's Redis vulnerability could lead to product malfunction or code execution.

Check Point, Kaspersky, and Tanium have released patches for severe vulnerabilities in their products. Check Point's CVE-2026-91843 allows unauthenticated remote code execution through the login process, affecting Security Management and Log Server products. Although there is no evidence of in-the-wild exploitation, Check Point has shared potential indicators of compromise (IoCs) and advised customers to patch immediately. Tanium addressed two high-severity SQL injection vulnerabilities in its Asset product and other vulnerabilities in Threat Response. Kaspersky's advisory highlights a Redis vulnerability in Kaspersky Security 10 for Linux Mail Server that could lead to product malfunction or code execution. The vulnerabilities were disclosed on September 16 and 17, 2026, with proof-of-concept code for CVE-2026-91843 released on September 18, 2026.