CVE-2026-93616: Check Point Multiple Products Path Traversal Vulnerability
KEV
Analyzed
Published 22-09-2026Last modified 23-09-2026
Vulnerability summary
CVE-2026-93616 is a critical (CVSS 9.8) vulnerability in Check Point Multiple Products. It is known to be exploited: CISA and ENISA list it, first on 22-09-2026. EPSS estimates a 91.61% chance of exploitation in the next 30 days, higher than 99.8% of scored vulnerabilities.
Priority
Act nowlisted as exploited
Listed as exploited by ENISA (22-09-2026)
Source freshness unavailable
How is this decided?CVSS score
9.8/10
010
Critical · v3.1 (CVE.org)EPSS score
91.61%
0%100%
Critical · +71.95 pp in 30 daysKEVExploited in the wildCritical · listed in 2 catalogs
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded
Timeline
- 22-09-2026PublishedVulnerability first disclosed.
- 22-09-2026Added to CISA KEVExploitedCheck Point Multiple Products Path Traversal Vulnerability
- 22-09-2026Added to ENISA KEVExploitedAdded to the ENISA known exploited vulnerabilities catalog.
- 23-09-2026Last modifiedVulnerability information updated.
- 25-09-2026CISA remediation dueDeadline passedApply mitigations per vendor instructions.
Description
A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.
CVSS metrics
2 scores · 2 sources · 1 versionCritical 9.8Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSourcesAll 2 agree
- NVDNIST9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
91.61%
Chance of exploitation in the next 30 days
Percentile
100%
Versus all other CVEs
30-day change
Increase +71.95 pp
From 19.65% on 14-10-2026
14-10-202613-11-2026
Known exploited
Compare KEV catalogs
CISA KEVListed- Added
- 22-09-2026
- Federal due date
- 25-09-2026
ENISA CNWListed- Added
- 22-09-2026
CIRCLNot in the CIRCL catalog.
CISA required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. support.checkpoint.com/results/sk/sk1000171/ nvd.nist.gov/vuln/detail/CVE-2026-93616
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Version check
Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Checkpoint2 products
- multi-domain_security_management≥ r80, < r81.10 | r81.10 | r81.10:take_106 | r81.10:take_107 | r81.10:take_109 | r81.10:take_110 | r81.10:take_113 | r81.10:take_128 | r81.10:take_129 | r81.10:take_130 | r81.10:take_131 | r81.10:take_132 | r81.10:take_135 | r81.10:take_139 | r81.10:take_14 | r81.10:take_141 | r81.10:take_150 | r81.10:take_152 | r81.10:take_156 | r81.10:take_158 | r81.10:take_165 | r81.10:take_169 | r81.10:take_170 | r81.10:take_171 | r81.10:take_172 | r81.10:take_173 | r81.10:take_174 | r81.10:take_177 | r81.10:take_181 | r81.10:take_183 | r81.10:take_187 | r81.10:take_190 | r81.10:take_22 | r81.10:take_30 | r81.10:take_38 | r81.10:take_44 | r81.10:take_45 | r81.10:take_55 | r81.10:take_61 | r81.10:take_66 | r81.10:take_75 | r81.10:take_78 | r81.10:take_79 | r81.10:take_81 | r81.10:take_82 | r81.10:take_85 | r81.10:take_87 | r81.10:take_9 | r81.10:take_93 | r81.10:take_94 | r81.10:take_95 | r81.20 | r81.20:take_10 | r81.20:take_101 | r81.20:take_103 | r81.20:take_105 | r81.20:take_111 | r81.20:take_113 | r81.20:take_115 | r81.20:take_118 | r81.20:take_119 | r81.20:take_120 | r81.20:take_122 | r81.20:take_126 | r81.20:take_127 | r81.20:take_14 | r81.20:take_141 | r81.20:take_146 | r81.20:take_158 | r81.20:take_161 | r81.20:take_166 | r81.20:take_24 | r81.20:take_26 | r81.20:take_38 | r81.20:take_41 | r81.20:take_43 | r81.20:take_45 | r81.20:take_53 | r81.20:take_54 | r81.20:take_65 | r81.20:take_70 | r81.20:take_76 | r81.20:take_79 | r81.20:take_8 | r81.20:take_84 | r81.20:take_89 | r81.20:take_90 | r81.20:take_92 | r81.20:take_96 | r81.20:take_98 | r81.20:take_99 | r82 | r82:take_10 | r82:take_103 | r82:take_107 | r82:take_118 | r82:take_12 | r82:take_122 | r82:take_126 | r82:take_14 | r82:take_18 | r82:take_19 | r82:take_25 | r82:take_33 | r82:take_34 | r82:take_36 | r82:take_39 | r82:take_41 | r82:take_43 | r82:take_44 | r82:take_60 | r82:take_73 | r82:take_91 | r82.10 | r82.10:take_19 | r82.10:take_24 | r82.10:take_36 | r82.10:take_40 | r82.10:take_44 | r82.10:take_6 | r82.20
- quantum security managementR82.20 with no Jumbo Hotfix | R82.10 with Jumbo Hotfix Take 44 or below | R82 with Jumbo Hotfix Take 126 or below | R81.20 with Jumbo Hotfix Take 166 or below | R81.10 (EOS) with Jumbo Hotfix Take 190 or below | R81 (EOS) | R80.40 (EOS) | R80.30 (EOS) | R80.20 (EOS) | R80.10 (EOS) | R80 (EOS) | ≥ r80, < r81.10 | r81.10 | r81.10:take_106 | r81.10:take_107 | r81.10:take_109 | r81.10:take_110 | r81.10:take_113 | r81.10:take_128 | r81.10:take_129 | r81.10:take_130 | r81.10:take_131 | r81.10:take_132 | r81.10:take_135 | r81.10:take_139 | r81.10:take_14 | r81.10:take_141 | r81.10:take_150 | r81.10:take_152 | r81.10:take_156 | r81.10:take_158 | r81.10:take_165 | r81.10:take_169 | r81.10:take_170 | r81.10:take_171 | r81.10:take_172 | r81.10:take_173 | r81.10:take_174 | r81.10:take_177 | r81.10:take_181 | r81.10:take_183 | r81.10:take_187 | r81.10:take_190 | r81.10:take_22 | r81.10:take_30 | r81.10:take_38 | r81.10:take_44 | r81.10:take_45 | r81.10:take_55 | r81.10:take_61 | r81.10:take_66 | r81.10:take_75 | r81.10:take_78 | r81.10:take_79 | r81.10:take_81 | r81.10:take_82 | r81.10:take_85 | r81.10:take_87 | r81.10:take_9 | r81.10:take_93 | r81.10:take_94 | r81.10:take_95 | r81.20 | r81.20:take_10 | r81.20:take_101 | r81.20:take_103 | r81.20:take_105 | r81.20:take_111 | r81.20:take_113 | r81.20:take_115 | r81.20:take_118 | r81.20:take_119 | r81.20:take_120 | r81.20:take_122 | r81.20:take_126 | r81.20:take_127 | r81.20:take_14 | r81.20:take_141 | r81.20:take_146 | r81.20:take_158 | r81.20:take_161 | r81.20:take_166 | r81.20:take_24 | r81.20:take_26 | r81.20:take_38 | r81.20:take_41 | r81.20:take_43 | r81.20:take_45 | r81.20:take_53 | r81.20:take_54 | r81.20:take_65 | r81.20:take_70 | r81.20:take_76 | r81.20:take_79 | r81.20:take_8 | r81.20:take_84 | r81.20:take_89 | r81.20:take_90 | r81.20:take_92 | r81.20:take_96 | r81.20:take_98 | r81.20:take_99 | r82 | r82:take_10 | r82:take_103 | r82:take_107 | r82:take_118 | r82:take_12 | r82:take_122 | r82:take_126 | r82:take_14 | r82:take_18 | r82:take_19 | r82:take_25 | r82:take_33 | r82:take_34 | r82:take_36 | r82:take_39 | r82:take_41 | r82:take_43 | r82:take_44 | r82:take_60 | r82:take_73 | r82:take_91 | r82.10 | r82.10:take_19 | r82.10:take_24 | r82.10:take_36 | r82.10:take_40 | r82.10:take_44 | r82.10:take_6 | r82.20
1 vendor · 2 products
References
3 links- blog.checkpoint.com/security/…Vendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-93616Government ResourceUS Government Resource