CVE-2026-936169.8CriticalCWE-22
CVE-2026-93616: Check Point Multiple Products Path Traversal Vulnerability
checkpoint · Quantum Security Management
Vendor fix available · Affected: checkpoint Quantum Security Management · Exploitation: in CISA KEV since 22 Sep
ExploitationIn CISA KEV
- In CISA KEVCISA KEV catalogue22 Sep
- Exploited (reported): not seen
- Scanning observed: not seen
- Proof of concept public2 public GitHub repositories (unverified), listed by PoC-in-GitHub22 Sep
- Not established: not seen
91.6%probability of exploitation in the next 30 days
99th percentile
050100
Higher than 99% of scored CVEs
9.8CriticalCVSS 3.1
LowMediumHighCrit.
Federal deadline
CISA KEV · added 22 Sep · catalogue entry
Passed 41 days ago
DescriptionNVD
A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.
What changed
- PoC-in-GitHub lists 2 public GitHub repositories (unverified) PoC-in-GitHub
- CISA added it to the KEV catalogue CISA
CISA required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Coverage3 articles · 3 outlets
One row per outlet, in order of first report. First in our coverage: SecurityOnline, 22 Sep.
Quiet for 6 weekslast report 22 Sep3 articles3 outlets
- Tue 22 Sep, 15:36 UTC. SecurityOnline, first report. Check Point Warns Attackers Are Exploiting Critical Management Flaw. Cites a CVE in CISA KEV.
- Tue 22 Sep, 20:22 UTC. Security Affairs, its first report on the story. Check Point Servers Hit by Actively Exploited Path Traversal Flaw. Cites a CVE in CISA KEV.
- Tue 22 Sep, 20:31 UTC. CISA, its first report on the story. CISA Warns of Active Attacks on Critical Check Point Flaw. Cites a CVE in CISA KEV.
- First report
- Article
- Official notice
- Running total
Added to CISA KEV
Show as tableHide table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| 22 Sep 15:36 | SecurityOnline | Check Point Warns Attackers Are Exploiting Critical Management Flaw |
| 22 Sep 20:22 | Security Affairs | Check Point Servers Hit by Actively Exploited Path Traversal Flaw |
| 22 Sep 20:31 | CISA | CISA Warns of Active Attacks on Critical Check Point Flaw |
- CISA Warns of Active Attacks on Critical Check Point FlawCISA · official notice
- Check Point Warns Attackers Are Exploiting Critical Management FlawSecurityOnline · first in our coverage
New articles also arrive in the RSS feed.