Check Point Management Server Directory Traversal Leading to Arbitrary Script Execution
ID: 5b49009e-bf5d-559b-9a95-5e64fd282d21
STIX ID: report--5b49009e-bf5d-559b-9a95-5e64fd282d21
Feed Name: Kudelski Security
Check Point disclosed CVE-2026-93616 (CVSS 9.8), an unauthenticated directory traversal plus file-upload vulnerability allowing arbitrary script upload and execution on Management, Log, and SmartEvent servers; the flaw is being actively exploited in the wild and was added to CISA's KEV. The advisory lists affected versions, immediate mitigations (restrict TCP/19009), specific hotfix/upgrade fixes, threat-hunting commands to detect exploitation, and recommends treating exposed, unpatched instances as potentially compromised.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.