CVE-2026-93616
Directory Traversal and File upload allows execution of arbitrary script on the Management Server
En bref Sévérité CRITICAL 9.8 Exploitation Exploitation connue (CISA KEV) · ajoutée le 2026-09-22 Exploitée selon l'ENISA depuis le 2026-09-22 EPSS EPSS 91.61 % · centile 100 (2026-10-27) État PUBLISHED Publiée 2026-09-22 Mise à jour 2026-09-23 Attribuée par checkpoint Statut NVD Analyzed Description A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.
Scores Version Score Vecteur Évalué par CVSS 3.1 CRITICAL 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H checkpoint CVSS 3.1 CRITICAL 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H NVD · cve@checkpoint.com (Secondary)
Faiblesses (CWE)
Références européennes
Avis du CERT-FR
Configurations affectées (CPE NVD) cpe:2.3:a:checkpoint:multi-domain_security_management:*:*:*:*:*:*:*:* ≥ r80 < r81.10cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:-:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_106:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_107:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_109:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_110:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_113:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_128:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_129:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_130:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_131:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_132:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_135:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_139:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_14:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_141:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_150:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_152:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_156:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_158:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_165:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_169:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_170:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_171:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_172:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_173:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_174:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_177:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_181:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_183:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_187:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_190:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_22:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_30:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_38:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_44:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_45:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_55:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_61:*:*:*:*:*:*cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_66:*:*:*:*:*:*+202 autres Produits affectés Produit Versions checkpoint · Quantum Security Management affected R82.20 with no Jumbo Hotfix ; affected R82.10 with Jumbo Hotfix Take 44 or below ; affected R82 with Jumbo Hotfix Take 126 or below ; affected R81.20 with Jumbo Hotfix Take 166 or below ; affected R81.10 (EOS) with Jumbo Hotfix Take 190 or below ; affected R81 (EOS)
Références
Sources
