Three Major Cybersecurity Firms Patch Severe Vulnerabilities in Their Products
In a timely move, Check Point, Kaspersky, and Tanium have all issued patches to fix severe vulnerabilities in their products. These flaws can be exploited by attackers to gain unauthorized access, execute malicious code, or even take control of sensitive systems.
Check Point’s Security Management and Log Server products are affected by a critical vulnerability (CVE-2026-91843) that allows an unauthenticated attacker to remotely execute arbitrary code with root privileges through the login process. Although there is no evidence of in-the-wild exploitation, Check Point has shared potential indicators of compromise (IoCs) for customers to monitor their systems.
Tanium has also published five new advisories to inform customers about high- and medium-severity vulnerabilities in its Asset and Threat Response products. Two SQL injection vulnerabilities in Tanium Asset can be exploited by authenticated attackers to gain read and write access to restricted data or tamper with SQL queries executed by the service. Meanwhile, Threat Response received patches for two medium-severity vulnerabilities: a server-side request forgery allowing access to restricted data, and an improper access control issue that can be exploited to create or modify alerts.
Kaspersky’s Linux Mail Server product is also affected by a Redis vulnerability discovered in 2023. According to Kaspersky, the flaw could potentially cause product malfunction or allow an attacker to execute code when processing files of a certain format. Users are advised to update their products as soon as possible to mitigate these risks.
These vulnerabilities highlight the importance of regular patching and updates for critical systems and software. Cybersecurity firms often rely on outdated or vulnerable components, which can be exploited by attackers to gain unauthorized access. It’s essential for organizations to stay vigilant and apply patches promptly to prevent potential security breaches.
If you’re a Check Point customer, it’s crucial to enable automatic updates or patch your installations immediately if they haven’t been updated automatically. Similarly, Tanium users should review their systems’ configuration and ensure that all recommended updates are applied. Kaspersky users can update their Linux Mail Server product to the latest version to address the Redis vulnerability.
Remember, a single exploited vulnerability can have devastating consequences for an organization’s security posture. By prioritizing patching and updates, you can significantly reduce your risk of being targeted by attackers. Stay vigilant, stay informed, and keep your systems secure!
Source: SecurityWeek — 2026-09-18