Check Point, Kaspersky, Tanium Patch Product Vulnerabilities

Three Vendors, Three Patches

Three enterprise-security vendors published patches this week, per a SecurityWeek roundup, for vulnerabilities ranging from a critical unauthenticated RCE down to a handful of authenticated SQL injection and SSRF bugs. Check Point grabbed the headlines with its management-plane flaw, but the more interesting news for defenders running Kaspersky or Tanium tooling is further down the report: five separate Tanium advisories and a Kaspersky fix for a two-year-old Redis issue that only now caught up with one of its Linux products.

Check Point: Already Covered

Check Point's Security Management Server and Log Server are affected by a critical, unauthenticated stack-overflow vulnerability (CVE-2026-91843, CVSS 9.8) that allows remote code execution with root privileges through the login process. We've already published a full technical breakdown — affected versions, exploitation path, and remediation steps — so we won't repeat it here. See Critical Check Point Flaw Lets Unauthenticated Attackers Run Code as Root for the details.

Kaspersky: An Old Redis Bug Resurfaces

Kaspersky published an advisory on September 17 disclosing that Kaspersky Security 10 for Linux Mail Server is affected by a Redis vulnerability that was originally discovered back in 2023. According to Kaspersky, the flaw "could potentially cause product malfunction or allow an attacker to execute code when processing files of a certain format."

Neither SecurityWeek nor Kaspersky's own advisory published a CVE identifier or CVSS score for this fix, and there's no report of active exploitation. Given the age of the underlying Redis issue, this reads as dependency catch-up rather than a fresh zero-day — but administrators running the affected mail-server product should still apply the update, since mail-processing components are a common target for file-format-triggered exploits.

Tanium: Five Advisories Across Two Products

Tanium's disclosures this week are more granular. Tanium Asset picked up two high-severity SQL injection fixes:

Both let an authenticated, low-privileged attacker tamper with SQL queries to read or write restricted data, per Tanium's own advisories.

Tanium Threat Response picked up three more fixes: a high-severity SQL query tampering flaw (CVE-2026-87105, fixed in 4.9.447, 4.12.317, and 4.17.289), a medium-severity SSRF bug that lets a low-privileged attacker force the server to make requests on its behalf (CVE-2026-87116, CVSS 6.5, fixed in 4.9.454, 4.12.324, and 4.17.292), and a lower-severity access-control flaw enabling unauthorized alert creation or modification.

None of the five have confirmed in-the-wild exploitation, but all require nothing more exotic than valid low-privilege credentials to trigger — worth prioritizing wherever Tanium consoles have broad user access.

Why It Matters

None of this week's three vendors are reporting active exploitation, which is the good news. The less-good news: management servers, mail-scanning appliances, and endpoint-management consoles all sit deep in an organization's trust chain — compromising any one tends to cascade. Patch Tanium Asset and Threat Response first if you're running affected builds (the SQL injection chain is easiest to weaponize), apply the Kaspersky Linux Mail Server update on your normal cycle, and treat the Check Point fix as urgent if your management server is reachable outside a tightly scoped admin network.

Related Reading

• Critical Check Point Flaw Lets Unauthenticated Attackers Run Code as Root
• New Check Point Flaw Lets Hackers Execute Code With Root Privileges

Sources

• SecurityWeek — Check Point, Kaspersky, Tanium Patch Product Vulnerabilities