CVE-2026-93616

CRITICAL9.8Path traversal

CISA KEVPublic PoCNewsHigh EPSS

Description

A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected products

checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr80 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.10 – r81.10
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr81.20 – r81.20
checkpoint / Multi-Domain Security Managementr82 – r82
checkpoint / Multi-Domain Security Managementr82 – r82
checkpoint / Multi-Domain Security Managementr82 – r82
checkpoint / Multi-Domain Security Managementr82 – r82
checkpoint / Multi-Domain Security Managementr82 – r82
checkpoint / Multi-Domain Security Managementr82 – r82
checkpoint / Multi-Domain Security Managementr82 – r82
checkpoint / Multi-Domain Security Managementr82 – r82
checkpoint / Multi-Domain Security Managementr82 – r82
checkpoint / Multi-Domain Security Managementr82 – r82
checkpoint / Multi-Domain Security Managementr82 – r82
checkpoint / Multi-Domain Security Managementr82 – r82
checkpoint / Multi-Domain Security Managementr82 – r82
checkpoint / Multi-Domain Security Managementr82 – r82
checkpoint / Multi-Domain Security Managementr82 – r82
checkpoint / Multi-Domain Security Managementr82 – r82
checkpoint / Multi-Domain Security Managementr82 – r82
checkpoint / Multi-Domain Security Managementr82 – r82
checkpoint / Multi-Domain Security Managementr82 – r82
checkpoint / Multi-Domain Security Managementr82 – r82
checkpoint / Multi-Domain Security Managementr82 – r82
checkpoint / Multi-Domain Security Managementr82 – r82
checkpoint / Multi-Domain Security Managementr82.10 – r82.10
checkpoint / Multi-Domain Security Managementr82.10 – r82.10
checkpoint / Multi-Domain Security Managementr82.10 – r82.10
checkpoint / Multi-Domain Security Managementr82.10 – r82.10
checkpoint / Multi-Domain Security Managementr82.10 – r82.10
checkpoint / Multi-Domain Security Managementr82.10 – r82.10
checkpoint / Multi-Domain Security Managementr82.10 – r82.10
checkpoint / Multi-Domain Security Managementr82.20 – r82.20
checkpoint / Quantum Security Managementr82 – r82
checkpoint / Quantum Security Managementr82 – r82
checkpoint / Quantum Security Managementr82 – r82
checkpoint / Quantum Security Managementr82.10 – r82.10
checkpoint / Quantum Security Managementr82.10 – r82.10
checkpoint / Quantum Security Managementr82.10 – r82.10
checkpoint / Quantum Security Managementr82.10 – r82.10
checkpoint / Quantum Security Managementr82.10 – r82.10
checkpoint / Quantum Security Managementr82.10 – r82.10
checkpoint / Quantum Security Managementr82.10 – r82.10
checkpoint / Quantum Security Managementr82.20 – r82.20
checkpoint / Quantum Security Managementr80 – r81.10
checkpoint / Quantum Security ManagementR82.10 with Jumbo Hotfix Take 44 or below – R82.10 with Jumbo Hotfix Take 44 or below
checkpoint / Quantum Security ManagementR82 with Jumbo Hotfix Take 126 or below – R82 with Jumbo Hotfix Take 126 or below
checkpoint / Quantum Security ManagementR81.20 with Jumbo Hotfix Take 166 or below – R81.20 with Jumbo Hotfix Take 166 or below
checkpoint / Quantum Security ManagementR81.10 (EOS) with Jumbo Hotfix Take 190 or below – R81.10 (EOS) with Jumbo Hotfix Take 190 or below
checkpoint / Quantum Security ManagementR81 (EOS) – R81 (EOS)
checkpoint / Quantum Security ManagementR80.40 (EOS) – R80.40 (EOS)
checkpoint / Quantum Security ManagementR80.30 (EOS) – R80.30 (EOS)
checkpoint / Quantum Security ManagementR80.20 (EOS) – R80.20 (EOS)
checkpoint / Quantum Security ManagementR80.10 (EOS) – R80.10 (EOS)
checkpoint / Quantum Security ManagementR80 (EOS) – R80 (EOS)
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.10 – r81.10
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security ManagementR82.20 with no Jumbo Hotfix – R82.20 with no Jumbo Hotfix
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr81.20 – r81.20
checkpoint / Quantum Security Managementr82 – r82
checkpoint / Quantum Security Managementr82 – r82
checkpoint / Quantum Security Managementr82 – r82
checkpoint / Quantum Security Managementr82 – r82
checkpoint / Quantum Security Managementr82 – r82
checkpoint / Quantum Security Managementr82 – r82
checkpoint / Quantum Security Managementr82 – r82
checkpoint / Quantum Security Managementr82 – r82
checkpoint / Quantum Security Managementr82 – r82
checkpoint / Quantum Security Managementr82 – r82
checkpoint / Quantum Security Managementr82 – r82
checkpoint / Quantum Security Managementr82 – r82
checkpoint / Quantum Security Managementr82 – r82
checkpoint / Quantum Security Managementr82 – r82
checkpoint / Quantum Security Managementr82 – r82
checkpoint / Quantum Security Managementr82 – r82
checkpoint / Quantum Security Managementr82 – r82
checkpoint / Quantum Security Managementr82 – r82
checkpoint / Quantum Security Managementr82 – r82

Exploits & proofs of concept

nucleiCheck Point Security Management - Unauthenticated Directory Traversal to RCEby 0x_Akoko,pdteam

News coverage

Check Point Warns of Management Server Zero-Day Exploited in Targeted AttacksThe Hacker News · 9/22/2026

References

MISChttps://support.checkpoint.com/results/sk/sk1000171

Updated 22m ago · 8 sources