CVE-2026-93616

criticalpriority · act · 90OT risk · criticalKEV · exploitedEU KEV · ENISAEPSS 0.759 · 100 %ileexploit · PoCDENLRUUS

grimoire priorityP0 · Act now

Exploitable?

Yes · in the wild

CISA KEV · 1 exploit · PoC

Likely / severe?

75.9% (100th) EPSS

CVSS 9.8 · critical

Is it mine?

45 products

Check your exposure

Who says so?

3 sources

fstec_bdu · cert_bund · ncsc_nl

added 2026-09-22remediate by 2026-09-25

required action Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

EU KEVflagged by ENISAreported 2026-09-22patched 2026-09-09

EPSS · scored 2026-10-23

Check Point Multiple Products Path Traversal Vulnerability

A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.

cvss

Technical severity, 0–10. One row per scoring source.

9.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.19.8criticalAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · cve@checkpoint.comexploitability 3.9 · impact 5.9

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Hsecondary · CVSS-BT (t0sche)

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · NCSC-NL NL

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: active · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-22USCWE-22USCWE-22US

exploits (1)

Public proof-of-concept and weaponised exploit code.

WadesWeaponShed/CVE-2026-93616_ChecksSimple Checks to look for indicators of compromisePoC · poc_in_github

affected products (45)

Products and version ranges known to be affected.

Check Point Security Management <R82.20 Security Hotfixall versionscert_bundDE
Check Point Security Management R81.10 <Jumbo Hotfix Accumulator Take 192all versionscert_bundDE
Check Point Security Management R81.20 <Jumbo Hotfix Accumulator Take 170all versionscert_bundDE
Check Point Security Management R82 <Jumbo Hotfix Accumulator Take 127all versionscert_bundDE
Check Point Security Management R82.10 <Jumbo Hotfix Accumulator Take 45all versionscert_bundDE
Check Point Security Management≤ R81.20 <Jumbo Hotfix Accumulator Take 170cert_bundDE
Check Point Security Management≤ R82 <Jumbo Hotfix Accumulator Take 127cert_bundDE
Check Point Security Management≤ R82.10 <Jumbo Hotfix Accumulator Take 45cert_bundDE
Check Point Security Management≤ R81.10 <Jumbo Hotfix Accumulator Take 192cert_bundDE
Check Point Security Management< R82.20 Security Hotfixcert_bundDE
Check Point Software Technologies Ltd. Multi-Domain Security Management Server (MDS)≤ R80fstec_bduRU
Check Point Software Technologies Ltd. Multi-Domain Security Management Server (MDS)≤ R82.20fstec_bduRU
Check Point Software Technologies Ltd. Multi-Domain Security Management Server (MDS)≤ R80.10fstec_bduRU
Check Point Software Technologies Ltd. Multi-Domain Security Management Server (MDS)≤ R80.20fstec_bduRU
Check Point Software Technologies Ltd. Multi-Domain Security Management Server (MDS)≤ R80.30fstec_bduRU
Check Point Software Technologies Ltd. Multi-Domain Security Management Server (MDS)≤ R80.40fstec_bduRU
Check Point Software Technologies Ltd. Multi-Domain Security Management Server (MDS)≤ R81fstec_bduRU
Check Point Software Technologies Ltd. Multi-Domain Security Management Server (MDS)≤ R82.10fstec_bduRU
Check Point Software Technologies Ltd. Multi-Domain Security Management Server (MDS)≤ R82fstec_bduRU
Check Point Software Technologies Ltd. Multi-Domain Security Management Server (MDS)≤ R81.20fstec_bduRU

showing 20 of 45

advisories (2)

Vendor and ecosystem advisories describing this.

NCSC-2026-0387Kwetsbaarheid verholpen in Check Point Security Management en Log ServersNL2026-09-23csaf · ncsc_nlNL
Check Point heeft een kwetsbaarheid verholpen in Security Management en Log Servers.
WID-SEC-W-2026-3512Check Point Security Management: Schwachstelle ermöglicht CodeausführungDeutsch2026-09-22csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Check Point Security Management ausnutzen, um beliebigen Programmcode auszuführen.

also known as (1)

Other names and identifiers for this entity.

BDU:2026-15065 fstec_bdu

sources

Which sources assert this record, and when.

fstec_bdu cert_bund ncsc_nl NVD CVE.org MITRE

published 2026-09-22modified 2026-09-23

references (3) nvd

External citations — patches, advisories, analysis.

https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616/Vendor Advisory
https://support.checkpoint.com/results/sk/sk1000171MitigationPatchVendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-93616US Government Resource

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan