Security1 hOctober 15, 2026, 22:40

CVE-2026-93616: Critical Check Point flaw exploited in the wild

CISA added CVE-2026-93616 (CVSS 9.8) to its Known Exploited Vulnerabilities catalog on September 22, 2026. The path traversal flaw in Check Point management and logging products lets unauthenticated attackers upload and execute scripts via TCP port 19009; attacks against a small number of customers are confirmed.

DEV Community

Open source

CVE-2026-93616: Critical Check Point flaw exploited in the wild

CVSS 9.8 path traversal (CWE-22) requires no authentication
Affects Security Management Server, Log Server, SmartEvent and MDM versions
Impacted releases span R81 through R82.20 without current Jumbo Hotfixes
LivePatch Take 28 and 29 do not fix the flaw; no final patch yet

#CheckPoint#CISA

Check Point and F5 patch actively exploited vulnerabilities

Security

Check Point warns of Management Server zero-day exploited in attacks

Security

Critical GitLab flaw CVSS 10.0 exploited in the wild

Security

CVE-2026-93616: Critical Check Point flaw exploited in the wild

Check Point and F5 patch actively exploited vulnerabilities

Check Point warns of Management Server zero-day exploited in attacks

Critical GitLab flaw CVSS 10.0 exploited in the wild

Check Point: Global Cyber Attacks Jump 48% Year on Year in September