CVE-2026-91843: Check Point Root RCE

CVE-2026-91843 is a critical (CVSS 9.8) pre-authentication stack-based buffer overflow in Check Point Security Management and Log Server products that can allow unauthenticated remote code execution as root; Check Point has released LivePatch updates for affected releases and recommends immediate patching, restricting Trusted Clients to explicit admin IPs, and hunting for the "Administrator failed to log in: Username too long" audit event. The advisory notes ~3,836 internet-facing hosts potentially exposing management interfaces but reports no confirmed in-the-wild exploitation as of September 18, 2026.