CVE-2026-93616
Directory Traversal and File upload allows execution of arbitrary script on the Management Server
At a glance Severity CRITICAL 9.8 Exploitation Known exploited (CISA KEV) · added 2026-09-22 Exploited per ENISA since 2026-09-22 EPSS EPSS 91.61 % · percentile 100 (2026-10-27) State PUBLISHED Published 2026-09-22 Updated 2026-09-23 Assigner checkpoint NVD status Analyzed Description A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.
Scores Version Score Vector Scored by CVSS 3.1 CRITICAL 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H checkpoint CVSS 3.1 CRITICAL 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H NVD · cve@checkpoint.com (Secondary)
Weaknesses (CWE)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:a:checkpoint:multi-domain_security_management:*:*:*:*:*:*:*:* ≥ r80 < r81.10cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:-:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_106:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_107:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_109:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_110:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_113:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_128:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_129:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_130:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_131:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_132:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_135:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_139:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_14:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_141:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_150:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_152:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_156:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_158:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_165:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_169:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_170:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_171:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_172:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_173:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_174:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_177:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_181:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_183:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_187:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_190:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_22:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_30:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_38:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_44:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_45:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_55:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_61:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_66:*:*:*:*:*:*+202 more Affected products Product Versions checkpoint · Quantum Security Management affected R82.20 with no Jumbo Hotfix ; affected R82.10 with Jumbo Hotfix Take 44 or below ; affected R82 with Jumbo Hotfix Take 126 or below ; affected R81.20 with Jumbo Hotfix Take 166 or below ; affected R81.10 (EOS) with Jumbo Hotfix Take 190 or below ; affected R81 (EOS)
References
Sources
