CVE-2026-93616Vulnerability
Check Point Multiple Products Path Traversal Vulnerability
Reported by 10 independent sources · first reported by CISA advisories · last reported
Last reported 10 days ago
Fix due 25 Sep 2026
Used by ransomware: not knownCISA KEV catalogue
higher than 99% of CVEsFIRST EPSS, as of 22 Oct 2026
What the reports say
14 reports, newest first · the exact sentence from each-
Top RCE Vulnerabilities“CVE-2026-85102, CVE-2026-93616”
-
September 2026 CVE Landscape“CVE-2026-93616”
-
Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes“The development comes as number of security flaws in Check Point (CVE-2026-85102 and CVE-2026-93616), Arista VeloCloud Orchestrator (CVE-2026-93952), F5 BIG-IP Access Policy Manager (CVE-2026-94127), Cisco Catalyst SD-WAN Manager (CVE-2026-76504), and Citrix NetScaler ADC and Net…”
-
⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats“…t the ones marked urgent first — CVE-2026-77179 (Docker), CVE-2026-93485, CVE-2026-87902 (WordPress), CVE-2026-89775 (Linux kernel), CVE-2026-93616, CVE-2026-85102 (Check Point), CVE-2026-93952 (Arista VeloCloud Orchestrator), CVE-2026-90898 (Bifrost), CVE-2026-86555, CVE-2026-86…”
-
28th September – Threat Intelligence Report“…int has observed active exploitation of two critical pre-authentication vulnerabilities with CVSS scores of 9.8 – CVE-2026-85102 and CVE-2026-93616.”
-
Bulletin d'actualité CERTFR-2026-ACT-041 (28 septembre 2026)“CVE-2026-93616”
-
Week in review: Gyazo breach exposes 23.6M user data, TASK#STOMP steals documents“Check Point Software has released emergency fixes for a critical Check Point Management Server vulnerability (CVE-2026-93616) that has been exploited as far back as July 23, 2026.”
-
Check Point Pre-Auth Flaws Under Attack“CVE-2026-85102 affects VPN certificate handling in Security Gateways and Spark Firewalls, while CVE-2026-93616 affects the Check Point Management web service.”
-
Path traversal en productos de Check Point“CVE-2026-93616: vulnerabilidad de path traversal y carga de archivos.”
-
Risky Bulletin: Network of 10,000 AI servers masks Chinese malicious activity“[Check Point // Check Point CVE-2026-93616 // Check Point CVE-2026-85102]”
-
Vulnérabilité dans Check Point Security Management Server (23 septembre 2026)“L'éditeur indique que la vulnérabilité CVE-2026-93616 est activement exploitée.”
-
Check Point security advisory (AV26-902) – Update 2“Check Point has reported that CVE-2026-85102 and CVE-2026-93616 are being exploited in the wild.”
-
Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks“The flaw, CVE-2026-93616, allows an attacker who can access the server's web service to run scripts on it without logging in.”
-
CISA Adds Four Known Exploited Vulnerabilities to Catalog“CVE-2026-93616 Check Point Multiple Products Path Traversal Vulnerability”
Indicators reported together
named in the same reports- fbijobs[.]govin 2 reports
Copy this indicator · defanged
Also named with it: CVE-2026-85102, CVE-2026-94127, CVE-2026-87902, CVE-2026-93952, CVE-2026-88771, CVE-2026-88772, CVE-2026-7273, CVE-2026-60004, CVE-2026-76461, CVE-2026-91843, CVE-2026-28324, CVE-2026-65660, CVE-2026-67279, CVE-2026-5430, CVE-2026-85103, CVE-2026-86296, CVE-2026-76504, CVE-2026-104286, CVE-2026-33824
Thanks — we review every report.