9.8

CVE-2026-93616

Warnung
Medienbericht

Directory Traversal and File upload allows execution of arbitrary script on the Management Server

A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Checkpoint ≫ Multi-domain Security Management Version >= r80 < r81.10
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update -
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_106
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_107
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_109
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_110
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_113
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_128
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_129
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_130
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_131
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_132
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_135
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_139
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_14
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_141
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_150
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_152
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_156
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_158
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_165
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_169
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_170
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_171
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_172
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_173
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_174
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_177
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_181
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_183
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_187
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_190
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_22
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_30
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_38
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_44
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_45
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_55
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_61
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_66
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_75
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_78
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_79
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_81
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_82
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_85
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_87
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_9
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_93
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_94
Checkpoint ≫ Multi-domain Security Management Version r81.10 Update take_95
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update -
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_10
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_101
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_103
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_105
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_111
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_113
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_115
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_118
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_119
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_120
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_122
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_126
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_127
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_14
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_141
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_146
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_158
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_161
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_166
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_24
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_26
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_38
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_41
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_43
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_45
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_53
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_54
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_65
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_70
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_76
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_79
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_8
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_84
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_89
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_90
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_92
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_96
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_98
Checkpoint ≫ Multi-domain Security Management Version r81.20 Update take_99
Checkpoint ≫ Multi-domain Security Management Version r82 Update -
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_10
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_103
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_107
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_118
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_12
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_122
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_126
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_14
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_18
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_19
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_25
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_33
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_34
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_36
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_39
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_41
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_43
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_44
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_60
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_73
Checkpoint ≫ Multi-domain Security Management Version r82 Update take_91
Checkpoint ≫ Multi-domain Security Management Version r82.10 Update -
Checkpoint ≫ Multi-domain Security Management Version r82.10 Update take_19
Checkpoint ≫ Multi-domain Security Management Version r82.10 Update take_24
Checkpoint ≫ Multi-domain Security Management Version r82.10 Update take_36
Checkpoint ≫ Multi-domain Security Management Version r82.10 Update take_40
Checkpoint ≫ Multi-domain Security Management Version r82.10 Update take_44
Checkpoint ≫ Multi-domain Security Management Version r82.10 Update take_6
Checkpoint ≫ Multi-domain Security Management Version r82.20 Update -
Checkpoint ≫ Quantum Security Management Version >= r80 < r81.10
Checkpoint ≫ Quantum Security Management Version r81.10 Update -
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_106
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_107
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_109
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_110
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_113
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_128
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_129
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_130
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_131
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_132
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_135
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_139
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_14
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_141
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_150
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_152
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_156
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_158
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_165
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_169
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_170
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_171
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_172
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_173
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_174
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_177
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_181
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_183
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_187
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_190
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_22
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_30
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_38
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_44
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_45
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_55
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_61
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_66
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_75
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_78
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_79
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_81
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_82
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_85
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_87
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_9
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_93
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_94
Checkpoint ≫ Quantum Security Management Version r81.10 Update take_95
Checkpoint ≫ Quantum Security Management Version r81.20 Update -
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_10
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_101
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_103
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_105
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_111
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_113
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_115
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_118
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_119
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_120
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_122
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_126
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_127
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_14
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_141
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_146
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_158
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_161
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_166
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_24
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_26
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_38
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_41
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_43
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_45
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_53
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_54
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_65
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_70
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_76
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_79
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_8
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_84
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_89
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_90
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_92
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_96
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_98
Checkpoint ≫ Quantum Security Management Version r81.20 Update take_99
Checkpoint ≫ Quantum Security Management Version r82 Update -
Checkpoint ≫ Quantum Security Management Version r82 Update take_10
Checkpoint ≫ Quantum Security Management Version r82 Update take_103
Checkpoint ≫ Quantum Security Management Version r82 Update take_107
Checkpoint ≫ Quantum Security Management Version r82 Update take_118
Checkpoint ≫ Quantum Security Management Version r82 Update take_12
Checkpoint ≫ Quantum Security Management Version r82 Update take_122
Checkpoint ≫ Quantum Security Management Version r82 Update take_126
Checkpoint ≫ Quantum Security Management Version r82 Update take_14
Checkpoint ≫ Quantum Security Management Version r82 Update take_18
Checkpoint ≫ Quantum Security Management Version r82 Update take_19
Checkpoint ≫ Quantum Security Management Version r82 Update take_25
Checkpoint ≫ Quantum Security Management Version r82 Update take_33
Checkpoint ≫ Quantum Security Management Version r82 Update take_34
Checkpoint ≫ Quantum Security Management Version r82 Update take_36
Checkpoint ≫ Quantum Security Management Version r82 Update take_39
Checkpoint ≫ Quantum Security Management Version r82 Update take_41
Checkpoint ≫ Quantum Security Management Version r82 Update take_43
Checkpoint ≫ Quantum Security Management Version r82 Update take_44
Checkpoint ≫ Quantum Security Management Version r82 Update take_60
Checkpoint ≫ Quantum Security Management Version r82 Update take_73
Checkpoint ≫ Quantum Security Management Version r82 Update take_91
Checkpoint ≫ Quantum Security Management Version r82.10 Update -
Checkpoint ≫ Quantum Security Management Version r82.10 Update take_19
Checkpoint ≫ Quantum Security Management Version r82.10 Update take_24
Checkpoint ≫ Quantum Security Management Version r82.10 Update take_36
Checkpoint ≫ Quantum Security Management Version r82.10 Update take_40
Checkpoint ≫ Quantum Security Management Version r82.10 Update take_44
Checkpoint ≫ Quantum Security Management Version r82.10 Update take_6
Checkpoint ≫ Quantum Security Management Version r82.20 Update -
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login

22.09.2026: CISA Known Exploited Vulnerabilities (KEV) Catalog

Check Point Multiple Products Path Traversal Vulnerability

Schwachstelle

Check Point Security Management Server, Multi-Domain Security Management Server, Log Server, Multi-Domain Log Server, and SmartEvent contain a path traversal vulnerability that allows an unauthenticated attacker to upload and execute arbitrary scripts.

Beschreibung

Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.42% 0.835
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Checkpoint 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
02.10.2026 08:34
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
28.09.2026 16:28
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
23.09.2026 22:17
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
23.09.2026 09:01
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
22.09.2026 21:30
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
22.09.2026 19:00
https://support.checkpoint.com/results/sk/sk1000171
Patch
Vendor Advisory
Mitigation
https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616/
Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-93616
US Government Resource