Check Point warns of Management Server zero-day exploited in attacks
Check Point patched CVE-2026-93616, an exploited unauthenticated Management Server zero-day.
Check Point released emergency hotfixes for CVE-2026-93616, a path-traversal flaw in Security Management Server that lets unauthenticated attackers upload and execute arbitrary scripts. The company said the vulnerability is exploited in the wild and that a handful of customers were attacked. Affected products include Security Management, Multi-Domain Management, Log Server, Multi-Domain Log Server, and SmartEvent; customers who cannot patch immediately should limit access to trusted IPs. The article also recounts other Check Point bugs, including CVE-2024-24919, CVE-2026-50751, CVE-2026-16232, CVE-2026-85102, and CVE-2026-85103.
- CVE-2026-93616 allows unauthenticated script upload and execution.
- Check Point says a handful of customers were attacked.
- Hotfix covers R82.20 management, log, and SmartEvent products.
- Trusted-client IP restrictions are advised if patching is delayed.
- The report also cites other exploited Check Point flaws.
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-24919 | Information Disclosure in Internet-Facing Check Point Quantum Security Gateways | 8.6 | 100% | KEVRansomware | KEV |
| CVE-2026-16232 | Authentication Bypass in Check Point SmartConsole Grants Full Admin Access | 9.3 | 4% | KEV | KEV |
| CVE-2026-50751 | Unauthenticated IKEv1 VPN Auth Bypass in Check Point Security Gateways | 9.3 | 85% | KEVRansomwarePoC | KEV |
| CVE-2026-85102 | Unauthenticated RCE in Check Point Quantum Security Gateway via certificate flaw | 9.8 | 54% | KEVPoC | KEV |
| CVE-2026-85103 | Unauthenticated RCE in Check Point Quantum VPN Certificate ASN.1 Decoding | 9.8 | — | ||
| CVE-2026-93616 | Unauthenticated RCE in Check Point Management Server via Directory Traversal and File Upload | 9.8 | 92% | KEVPoC | KEV |
From the original article
2 min read at bleepingcomputer.com
Check Point Software released emergency hotfixes to address a critical Security Management Server vulnerability that could let attackers run arbitrary scripts. [...]
By Sergiu Gatlan · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.