Search/CVE-2026-93616
● CVE — Critical

CVE-2026-93616

VendorcheckpointProductmulti-domain security management, quantum security managementDiscoveredSep 22, 2026UpdatedSep 23, 2026

A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.

View graph Watch Export
CVSS v3.1
9.8 CRITICAL
EPSS
75.9%
probability of exploitation in 30 days
CISA KEV
Listed
confirmed active exploitation
News coverage
11
sources referencing this CVE
Related IOCs
10
seen in the same coverage
EPSS Trend
Sep 24, 2026 → Oct 22, 2026
▲ 73.4pp
2.42% → 75.9% over 4 tracked changes
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Connections
19 relationships
Timeline
disclosure → media coverage
Sep 22, 2026
Disclosure — published as a CVE record.
Sep 22, 2026
acn.gov.it reports: CheckPoint: rilevato sfruttamento in rete della CVE-2026-93616
Sep 22, 2026
bleepingcomputer.com reports: Check Point warns of Management Server zero-day exploited in attacks
Sep 22, 2026
thehackernews.com reports: Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks
Sep 23, 2026
securityweek.com reports: Check Point Patches Exploited Management Server Zero-Day
Sep 23, 2026
helpnetsecurity.com reports: Attackers hit Check Point Management Servers and Spark firewalls, F5 BIG-IP APM instances
Sep 23, 2026
bsi.bund.de reports: Version 1.0: Check Point - Angreifer nutzen Schwachstellen seit Sommer aus
Sep 23, 2026
bleepingcomputer.com reports: Check Point warns of hackers exploiting Security Gateway VPN RCE flaw
Sep 27, 2026
helpnetsecurity.com reports: Week in review: Gyazo breach exposes 23.6M user data, TASK#STOMP steals documents
Sep 28, 2026
research.checkpoint.com reports: 28th September – Threat Intelligence Report
Sep 28, 2026
thehackernews.com reports: ⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats
Oct 2, 2026
thehackernews.com reports: Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes
Public PoC (2)
github.com/WadesWeaponShed/CVE-2026-93616_Checksgithub.com/BishopFox/CVE-2026-93616-check
Unverified third-party code — review before executing.