ctrlINT What the industry said about every indicator, with the quote

CVE-2026-93616Vulnerability

Check Point Multiple Products Path Traversal Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .

Reported by 10 independent sources · first reported by CISA advisories · last reported

Last reported 10 days ago

CISA KEVAdded 22 Sep 2026
Fix due 25 Sep 2026
Used by ransomware: not knownCISA KEV catalogue
EPSS75.9%
higher than 99% of CVEsFIRST EPSS, as of 22 Oct 2026

What the reports say

14 reports, newest first · the exact sentence from each
  1. “CVE-2026-85102, CVE-2026-93616”

    SOCRadarVendor
    Top RCE Vulnerabilities
  2. “CVE-2026-93616”

    Recorded FutureVendor
    September 2026 CVE Landscape
  3. “The development comes as number of security flaws in Check Point (CVE-2026-85102 and CVE-2026-93616), Arista VeloCloud Orchestrator (CVE-2026-93952), F5 BIG-IP Access Policy Manager (CVE-2026-94127), Cisco Catalyst SD-WAN Manager (CVE-2026-76504), and Citrix NetScaler ADC and Net…”

    The Hacker NewsNews
    Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes
  4. “…t the ones marked urgent first — CVE-2026-77179 (Docker), CVE-2026-93485, CVE-2026-87902 (WordPress), CVE-2026-89775 (Linux kernel), CVE-2026-93616, CVE-2026-85102 (Check Point), CVE-2026-93952 (Arista VeloCloud Orchestrator), CVE-2026-90898 (Bifrost), CVE-2026-86555, CVE-2026-86…”

    The Hacker NewsNews
    ⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats
  5. “…int has observed active exploitation of two critical pre-authentication vulnerabilities with CVSS scores of 9.8 – CVE-2026-85102 and CVE-2026-93616.”

    Check Point ResearchVendor
    28th September – Threat Intelligence Report
  6. “CVE-2026-93616”

    CERT-FRGovernment
    Bulletin d'actualité CERTFR-2026-ACT-041 (28 septembre 2026)
  7. “Check Point Software has released emergency fixes for a critical Check Point Management Server vulnerability (CVE-2026-93616) that has been exploited as far back as July 23, 2026.”

    Help Net SecurityNews
    Week in review: Gyazo breach exposes 23.6M user data, TASK#STOMP steals documents
  8. “CVE-2026-85102 affects VPN certificate handling in Security Gateways and Spark Firewalls, while CVE-2026-93616 affects the Check Point Management web service.”

    SOCRadarVendor
    Check Point Pre-Auth Flaws Under Attack
  9. “CVE-2026-93616: vulnerabilidad de path traversal y carga de archivos.”

    INCIBE-CERTGovernment
    Path traversal en productos de Check Point
  10. “[Check Point // Check Point CVE-2026-93616 // Check Point CVE-2026-85102]”

    Risky Business NewsNews
    Risky Bulletin: Network of 10,000 AI servers masks Chinese malicious activity
  11. “L'éditeur indique que la vulnérabilité CVE-2026-93616 est activement exploitée.”

    CERT-FRGovernment
    Vulnérabilité dans Check Point Security Management Server (23 septembre 2026)
  12. “Check Point has reported that CVE-2026-85102 and CVE-2026-93616 are being exploited in the wild.”

    Canadian Centre for Cyber SecurityGovernment
    Check Point security advisory (AV26-902) – Update 2
  13. “The flaw, CVE-2026-93616, allows an attacker who can access the server's web service to run scripts on it without logging in.”

    The Hacker NewsNews
    Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks
  14. “CVE-2026-93616 Check Point Multiple Products Path Traversal Vulnerability”

    CISA advisoriesGovernment
    CISA Adds Four Known Exploited Vulnerabilities to Catalog

Indicators reported together

named in the same reports
Copy this indicator · defanged

Also named with it: CVE-2026-85102, CVE-2026-94127, CVE-2026-87902, CVE-2026-93952, CVE-2026-88771, CVE-2026-88772, CVE-2026-7273, CVE-2026-60004, CVE-2026-76461, CVE-2026-91843, CVE-2026-28324, CVE-2026-65660, CVE-2026-67279, CVE-2026-5430, CVE-2026-85103, CVE-2026-86296, CVE-2026-76504, CVE-2026-104286, CVE-2026-33824

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2026-93616 here?
No account needed. We do not store your IP address.