by Kastro
Paper/Archive/CVE-2026-93616

CVE-2026-93616

checkpoint Quantum Security Management — Directory Traversal and File upload allows execution of arbitrary script on the Management Server

KEV · due 25 SepEPSS 92%public exploitSSVC actCVSS 9.8
critical.is priorityof 100
99
CVSS 9.8 (CNA)9.8 / 10 × 3029.4In CISA KEV+3030.0EPSS percentile 99.8.998 × 2020.0Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.

Affected

ProductAffectedFixed inSource
Quantum Security ManagementR82.20 with no Jumbo Hotfix–CNA
Quantum Security ManagementR82.10 with Jumbo Hotfix Take 44 or below–CNA
Quantum Security ManagementR82 with Jumbo Hotfix Take 126 or below–CNA
Quantum Security ManagementR81.20 with Jumbo Hotfix Take 166 or below–CNA
Quantum Security ManagementR81.10 (EOS) with Jumbo Hotfix Take 190 or below–CNA
Quantum Security ManagementR81 (EOS)–CNA
Quantum Security ManagementR80.40 (EOS)–CNA
Quantum Security ManagementR80.30 (EOS)–CNA
Quantum Security ManagementR80.20 (EOS)–CNA
Quantum Security ManagementR80.10 (EOS)–CNA
Quantum Security ManagementR80 (EOS)–CNA

Scores by source

checkpoint (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refsupport.checkpoint.com/results/sk/sk1000171advisoryblog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-93616kevcisa.gov/known-exploited-vulnerabilities-catalog