CVE-2026-93616

Awaiting Analysis

Published: 22 Sept 2026, 12:59

Last modified:22 Sept 2026, 19:49

Vulnerability Summary

Overall Risk (default)

high

70/100

CVSS Score

9.8 CRITICAL

v3.1 (cve.org)

EPSS Score

No data

KEV

Listed

CISA

1 listing

Ransomware

No reports

Public exploits

None found

Dark Web

Not detected

Timeline

22 Sept 2026, 12:59

Published

Vulnerability first disclosed

22 Sept 2026, 00:00

Added to CISA KEV

Check Point Multiple Products Path Traversal Vulnerability

22 Sept 2026, 19:49

Last Modified

Vulnerability information updated

25 Sept 2026, 00:00

CISA Remediation Due

Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Description

A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.

CVSS Metrics

v3.1•CRITICAL•Score: 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Techniques & Countermeasures

CWE-22•Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Affected Systems

checkpoint•quantum security management
R82.20 with no Jumbo Hotfix | R82.10 with Jumbo Hotfix Take 44 or below | R82 with Jumbo Hotfix Take 126 or below | R81.20 with Jumbo Hotfix Take 166 or below | R81.10 (EOS) with Jumbo Hotfix Take 190 or below | R81 (EOS) | R80.40 (EOS) | R80.30 (EOS) | R80.20 (EOS) | R80.10 (EOS) | R80 (EOS)