Check Point Management Server 0-Day Vulnerability Actively Exploited in Attacks
Check Point says attackers exploited critical Management Server zero-day CVE-2026-93616 for unauthenticated code execution.
Check Point says attackers exploited CVE-2026-93616, a CVSS 9.8 zero-day in its Security Management infrastructure, before a fix was available. Directory traversal combined with unsafe file upload lets an unauthenticated remote attacker upload and execute arbitrary scripts and load an arbitrary Java class. A handful of targeted attacks were observed on July 23, 2026. Affected releases span Security Management, Multi-Domain Management, Log Server, and SmartEvent, including listed R82, R81, and older R80 versions; Smart-1 Cloud and Check Point firewall appliances are unaffected. LivePatch does not remediate it, so administrators must install the listed fixed Jumbo takes or the R82.20 hotfix and restrict TCP port 19009.
- CVE-2026-93616 scores 9.8 and requires no authentication.
- Check Point observed limited exploitation on July 23, 2026.
- LivePatch Takes 28 and 29 do not fix the flaw.
- Restrict TCP port 19009 until the emergency hotfix is installed.
- Hunt cpm.elg logs and core dumps for traversal indicators.
- CVEs
- CVE-2026-93616
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-93616 | Unauthenticated RCE in Check Point Management Server via Directory Traversal and File Upload | 9.8 | 92% | KEVPoC | KEV |
From the original article
3 min read at cybersecuritynews.com
Check Point has warned customers that attackers are exploiting a critical zero-day vulnerability in its Security Management infrastructure. Tracked as CVE-2026-93616, the flaw carries a CVSS score of 9. 8 and enables an unauthenticated remote attacker to upload and execute arbitrary scripts on an exposed Management Server.
By Guru Baran · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.