Check Point Security Management and Log Server products contain a critical vulnerability (CVE-2026-91843) that enables unauthenticated attackers to remotely execute arbitrary code with root privileges during the login process. Although no in-the-wild exploitation has been observed, Check Point has provided indicators of compromise and urges customers to patch immediately if automatic updates are disabled. Tanium addressed five vulnerabilities, including two high-severity SQL injection flaws in Tanium Asset and Threat Response, and two medium-severity issues involving server-side request forgery and improper access control. Kaspersky patched a Redis vulnerability in Kaspersky Security 10 for Linux Mail Server that could cause product malfunction or code execution when processing certain file formats.

Successful exploitation of the Check Point vulnerability could allow attackers to gain root-level remote code execution on affected systems, potentially compromising the entire environment. Tanium's SQL injection vulnerabilities could allow authenticated attackers to read, modify, or tamper with restricted data and SQL queries. Kaspersky's Redis vulnerability may lead to product malfunction or remote code execution when processing specific file formats. These vulnerabilities collectively represent critical to high risks if exploited.

Check Point customers should immediately apply the official patches for CVE-2026-91843, especially if automatic updates are not enabled. Tanium users must update to the patched versions addressing the SQL injection, server-side request forgery, and access control vulnerabilities. Kaspersky users should apply the update for Kaspersky Security 10 for Linux Mail Server to mitigate the Redis-related vulnerability. No evidence of active exploitation has been reported for the Check Point vulnerability, but prompt patching is strongly recommended.