Three leading cybersecurity companies, Check Point, Kaspersky , and Tanium, have released urgent security updates to address serious vulnerabilities in their products. These weaknesses, if successfully exploited, could allow malicious actors to remotely execute arbitrary code, gain access to sensitive data, or even take complete control of affected systems. The simultaneous disclosure of vulnerabilities by three major security vendors is a stark reminder that even protection tools can be targeted by attacks.
The cybersecurity landscape remains highly dynamic, with attackers constantly looking for new vulnerabilities in software widely used by organizations worldwide. The fact that companies such as Check Point, Kaspersky , and Tanium — which are integral to the defense infrastructure of thousands of businesses — are facing critical vulnerabilitieshighlights the need to immediately apply available patches. According to SecurityWeek, all three companies have notified their customers and released fixes for the affected products.
The increasing trend of cyber security products being targeted by malicious actors is no coincidence. Security tools often run with high levels of privilege on the systems they protect, making them particularly attractive targets. A successful attack on such a tool can give the attacker access to the victim’s entire network, while bypassing detection mechanisms.
See also: Check Point VPN vulnerabilities: NCSC warns of imminent exploitation
Check Point: Critical RCE vulnerability with root privileges
Check Point has notified its customers of a critical vulnerability affecting its Security Management and Log Server. The vulnerability, identified as CVE-2026-91843, could be exploited by an unauthenticatedattackerto execute arbitrary code remotely with rootby exploiting the login process. This is a particularly dangerous vulnerability, as it does not require any prior authentication from the attacker.
In recent months, threat actors have focused their attention on Check Point, including zero-day vulnerabilities that were actively exploited before patches were released. However, for CVE-2026-91843, the company said there is no evidence of active exploitation. However, Check Point has shared some potential indicators of compromise (IoCs) to help organizations check if they have been exploited.
The company strongly recommended that all customers who do not have automatic updates enabled apply the available patch immediately . Given the criticality of the vulnerability — remote code execution with root privileges without authentication — delaying the application of the update poses a serious risk to any organization using the affected products. It is worth noting that Security Management products are used by large enterprises and government organizations worldwide, which significantly increases the impact of a potential exploit.
Tanium: Five new SQL Injection and SSRF vulnerabilities
Tanium has published five new security advisories this week, informing its customers of high and moderate severity vulnerabilities in various of its products. In Tanium Asset , the company fixed two high severity vulnerabilities SQL injection that authenticated attackers could exploit to gain read and write access to restricted data or to manipulate SQL queries executed by the service.
Additionally, Tanium's Threat Response product has been patched for another vulnerability that allows for SQL query forgery . The same product also received patches for two moderate severity vulnerabilities: a Server-Side Request Forgery (SSRF) vulnerability that allows access to restricted data and an improper access control issue .
See also: CVE-2026-16232: PoC for Check Point SmartConsole critical vulnerability
Kaspersky: Redis vulnerability affects Linux Mail Server
Kaspersky a new security advisory on September 17, informing users that Kaspersky Security 10 for Linux Mail Server is affected by a vulnerability in Redis that was discovered in 2023.According to the company, “the vulnerability could potentially cause the product to malfunction or allow an attacker to execute code when processing files of a certain format.”
Redis is a widely usedin-memory data store, which is used by many applications as a cache or message broker. Vulnerabilities in Redis can have a wide impact, as the software is embedded in a wide range of applications and services. In the case of Kaspersky Security for Linux Mail Server, the vulnerability concerns the processing of files of a certain format, which could be exploited by an attacker who has the ability to send malicious files via email.
Practical tips for protecting against vulnerabilities in security tools
The simultaneous disclosure of vulnerabilities by three major cybersecurity companies is an important reminder for organizations using these tools. The first and most critical action is to immediately apply the available patches.
See also: Check Point VPN zero-day: How to protect your corporate VPN
More generally, organizations should adopt a proactive approach to vulnerability management , including regular vulnerability scanning, monitoring security advisories from their vendors, and promptly applying patches . The principle of least privilege and network segmentation can also limit the impact of a successful exploit, even if the corresponding patch has not yet been applied .
