Vulnerability Details CVE-2026-93616
A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.024
EPSS Ranking 83.5%
CVSS Severity
CVSS v3 Score 9.8
Proposed Action
Check Point Security Management Server, Multi-Domain Security Management Server, Log Server, Multi-Domain Log Server, and SmartEvent contain a path traversal vulnerability that allows an unauthenticated attacker to upload and execute arbitrary scripts.
Ransomware Campaign
Unknown
References
- https://support.checkpoint.com/results/sk/sk1000171
- https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-93616
Products affected by CVE-2026-93616
-
cpe:2.3:a:checkpoint:multi-domain_security_management:r80
-
cpe:2.3:a:checkpoint:multi-domain_security_management:r80.10
-
cpe:2.3:a:checkpoint:multi-domain_security_management:r80.20
-
cpe:2.3:a:checkpoint:multi-domain_security_management:r80.30
-
cpe:2.3:a:checkpoint:multi-domain_security_management:r80.40
-
cpe:2.3:a:checkpoint:multi-domain_security_management:r81
-
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10
-
cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20
-
cpe:2.3:a:checkpoint:multi-domain_security_management:r82
-
cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10
-
cpe:2.3:a:checkpoint:multi-domain_security_management:r82.20
-
cpe:2.3:a:checkpoint:quantum_security_management:r80
-
cpe:2.3:a:checkpoint:quantum_security_management:r80.10
-
cpe:2.3:a:checkpoint:quantum_security_management:r80.20
-
cpe:2.3:a:checkpoint:quantum_security_management:r80.30
-
cpe:2.3:a:checkpoint:quantum_security_management:r80.40
-
cpe:2.3:a:checkpoint:quantum_security_management:r81
-
cpe:2.3:a:checkpoint:quantum_security_management:r81.10
-
cpe:2.3:a:checkpoint:quantum_security_management:r81.20
-
cpe:2.3:a:checkpoint:quantum_security_management:r82
-
cpe:2.3:a:checkpoint:quantum_security_management:r82.10