Multi-Domain Log Server (Product): news timeline & CVEs

Hackers Exploit Check Point 0-Day Flaw to Execute Code on Management Servers

Check Point says CVE-2026-93616 is exploited to run code on unauthenticated management servers.

Check Point disclosed CVE-2026-93616, a CVSS 9.8 directory-traversal and arbitrary file-upload flaw that lets unauthenticated attackers upload and execute scripts on exposed management servers. Affected products include Security Management Server, Multi-Domain Security Management, Log Server, Multi-Domain Log Server, and SmartEvent; Smart-1 Cloud and firewall appliances are not affected. Check Point said a handful of customer environments were already attacked. Fixes are in an R82.20 security hotfix and jumbo takes R82.10 Take 45, R82 Take 127, R81.20 Take 170, and R81.10 Take 192. LivePatch does not remediate the issue.

GBHackersupdated Sep 25, 10:30 UTC · 1d agofirst Sep 23, 05:17 UTC · 4d agoExploit / PoC in the wild 15 sources CVE-2026-93616

Check Point warns of Management Server zero-day exploited in attacks

Check Point patched CVE-2026-93616, an exploited unauthenticated Management Server zero-day.

Check Point released emergency hotfixes for CVE-2026-93616, a path-traversal flaw in Security Management Server that lets unauthenticated attackers upload and execute arbitrary scripts. The company said the vulnerability is exploited in the wild and that a handful of customers were attacked. Affected products include Security Management, Multi-Domain Management, Log Server, Multi-Domain Log Server, and SmartEvent; customers who cannot patch immediately should limit access to trusted IPs. The article also recounts other Check Point bugs, including CVE-2024-24919, CVE-2026-50751, CVE-2026-16232, CVE-2026-85102, and CVE-2026-85103.

BleepingComputerupdated Sep 25, 10:30 UTC · 1d agofirst Sep 22, 16:32 UTC · 4d agoExploit / PoC in the wild 15 sources CVE-2026-93616 CVE-2024-24919

Check Point security advisory (AV26-933)

Canadian Cyber Centre relays Check Point advisory for CVE-2026-91843, a stack overflow in the login process of Security Management and Log Servers.

On September 17, 2026, the Canadian Centre for Cyber Security (AV26-933) published an advisory for a Check Point vulnerability tracked as CVE-2026-91843. The flaw is a stack overflow in the login process affecting Security Management Server, Multi-Domain Security Management Server, Log Server and Multi-Domain Log Server versions R81.20 (Jumbo Hotfix Take 166 and prior), R82 (Take 126 and prior), R82.10 (Take 44 and prior) and R82.20. Administrators are urged to review Check Point sk1000155 and apply updates as they become available.

Canadian Centre for Cyber SecuritySep 17, 18:21 UTC · 9d agoAdvisory CVE-2026-91843

Multi-Domain Log Server

Timeline3 articles

Related CVEsby mentions

Appears with

Hackers Exploit Check Point 0-Day Flaw to Execute Code on Management Servers

Check Point warns of Management Server zero-day exploited in attacks

Check Point security advisory (AV26-933)