CVE-2026-93616
NVD CRITICAL 9.8 · published 2026-09-22 · 1 on the wire
A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.
Exploited in the wild
Yes
CISA added it 2026-09-22. An observation, not a forecast.
EPSS · 30-day forecast
2%
Chance of exploitation in the next 30 days, 83th percentile of all CVEs. A forecast; KEV outranks it.
CVSS · NVD
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Internet exposure
—
No exposure census on this CVE's dispatches.
On the wire1
- nvd.nist.gov ↗
- cisa.gov · KEV catalogue ↗
- first.org · EPSS ↗
- support.checkpoint.com/results/sk/sk1000171 ↗
- blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616/ ↗
- www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-93616 ↗
Early access
Watch this one?
Early access opens alerts first — one email when a CVE you follow lands on KEV or an adversary you follow lands on the wire. Nothing else, ever.
bot-protected