CVE-2026-93616: Check Point Management Server Zero-Day Exploited in Targeted Attacks

**CVE-2026-93616 — Check Point Management critical pre-authentication path traversal and file-upload zero-day (CVSS 9.8):** enables unauthenticated attackers with network access to upload and execute arbitrary scripts or load Java classes on Security Management servers; Check Point confirmed targeted exploitation on 2026-07-23 prior to public patching (2026-09-22). The advisory lists affected R80/R81/R82 branches, fixed Hotfix/Takes, recommends immediate patching, restricting TCP/19009, and performing retrospective hunting using vendor sk1000171 IOCs.