Vulnerability (CVE)
Check Point disclosed CVE-2026-91843, a stack overflow in the login process of its Security Management and Log Servers, rated 9.8 on CVSS, that lets an unauthenticated attacker run code as root over the network, triggered by a login request carrying a very...
Check Point said attackers exploited a previously unknown path traversal flaw, CVE-2026-93616, in its Security Management Server in a handful of targeted attacks on July 23, allowing anyone who can reach the server's web service to upload and run scripts...
Cisco warned of a maximum-severity authentication bypass in Identity Services Engine, tracked as CVE-2026-76460 with a CVSS score of 10.0, that is under active exploitation and stems from insufficient authentication control on an API endpoint. The week's...