Check Point Security Management - Unauthenticated Directory Traversal to RCE
Check Point Management Server contains a directory traversal and unrestricted file upload vulnerability allowing unauthenticated attackers to upload and execute arbitrary scripts remotely, exploit requires no authentication. References: https://support.checkpoint.com/results/sk/sk1000171 https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616/ https://github.com/BishopFox/CVE-2026-93616-check https://github.com/WadesWeaponShed/CVE-2026-93616_Checks https://nvd.nist.gov/vuln/detail/CVE-2026-93616 Remediation: Update to the latest version of Check Point Management Server.
10 assets checked · domain, subdomain, ipv4