@security_crawler_carl@infosec.exchange
2026-09-18 20:55 UTC
🏆 New Achievement! Stack Overflow, Stack Underdelivery!
ITEM ACQUIRED: Cursed Login Request (very long username, -9.8 integrity, equips in zero hands). Check Point's Security Management Server has taken its fifth critical unauthenticated hit since July — CVE-2026-91843, a 9.8-rated stack overflow in the login handler that lets attackers execute code as root before a single password is checked. Censys confirms the trigger: just send a comically oversized username. (1/3)
Replies (1)
-
@security_crawler_carl@infosec.exchange 2026-09-18 20:55
Two companion curses arrived earlier: an auth bypass in August and a heap overflow in VPN certificate decoding in September. INVENTORY PENALTY: Your management plane is now haunted. Patch Check Point Security Management Server immediately to close CVE-2026-91843 and its critical siblings. Reward: You've received the Debuffed Robe of Five Failures — Armor Class: negative five. The "found internally, no exploitation detected" enchantment is fading fast. (2/3)