> TritonInfoSec News
Home / Sep 18, 2026 / Story
0
#5 The Hacker News general September 17, 2026 at 18:08 UTC

Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root

By [email protected] (The Hacker News)

AI Summary

Check Point disclosed a critical unauthenticated remote code execution vulnerability in its Security Management Server and Log Server products, allowing network-accessible attackers to run arbitrary code as root without credentials. Check Point has released a fix via its LivePatch channel and reports no evidence of exploitation in the wild, but the affected system controls firewall policy and administrator access — making it a high-value target.

Read full article → https://thehackernews.com/2026/09/critical-check-p…

Relevance score: 84.0/100

# More from September 18

  1. 1
    Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks The Hacker News
  2. 2
    Cisco alerts customers to second actively exploited zero-day in as many days CyberScoop
  3. 3
    Brevo supply-chain attack injected ClickFix scripts on customer sites BleepingComputer
  4. 4
    Cyberattacks on Two Oil Tankers Prompt Coast Guard, FBI to Board Vessels SecurityWeek
  5. 6
    China-Aligned FamousSparrow Deploys SparroWocky Backdoor Across Latin America The Hacker News
  6. 7
    Gyazo Breach Exposes 23.62 Million User Records and 490 Million Image Metadata Records The Hacker News
  7. 8
    Revolut Data Breach: 5 Months, 680 High-Profile Accounts, $3M Ransom SecurityWeek
  8. 9
    BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS The Hacker News
  9. 10
    Iran-Linked Handala Hack Tied to HEAVYGRAM Telegram Backdoor That Can Steal Passwords The Hacker News