{"id":"CVE-2026-91843","published":"2026-09-16T14:17:13.947","lastModified":"2026-09-18T19:34:36.657","description":"A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-121"],"vendors":[],"products":[],"references":[{"url":"https://support.checkpoint.com/results/sk/sk1000155","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw is a stack overflow vulnerability during the unauthenticated login process, allowing attackers to execute arbitrary code with root privileges. This is critical because it provides a powerful attack vector for remote code execution without authentication.","exploitability":"Exploitation is relatively straightforward as it requires no user interaction and can be automated. The attacker must be able to send crafted input to the login process.","blast_radius":"If exploited, the impact is severe as it allows attackers to gain full control over the system, potentially leading to data loss, system compromise, and further attacks.","remediation":"Upgrade to the latest version of the affected software, as no specific version is mentioned in the description. Follow the vendor's security advisory for detailed instructions.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","auth-bypass","stack-overflow","critical","remote-code-execution"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-09-28T08:57:57.192Z"}}