CRITICALCVSS 9.8Actively exploited · CISA KEV since 2026-09-22Vulnerability

CVE-2026-93616

Check Point Security Management Server, Multi-Domain Security Management Server, Log Server, Multi-Domain Log Server, and SmartEvent contain a path traversal vulnerability that allows an unauthenticated attacker to upload and execute arbitrary scripts.

Properties

Euvd product
Quantum Security Management
Vulnerability name
Check Point Multiple Products Path Traversal Vulnerability
First seen
2026-09-23T03:55:59+00:00
Cvss score
9.8
Epss score
0.91605
Last seen
2026-10-19T12:00:27+00:00
Due date
2026-09-25
Euvd assigner
checkpoint
Retrieved at
2026-11-07T06:44:46+00:00
Exploited euvd since
2026-09-22T00:00:00+00:00
Src batch id
euvd-20261026T073402Z-7ce603
Source url
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-84375
Date added
2026-09-22
Score
9.8
Euvd base score version
3.1
Fetched at
2026-10-26T07:34:03+00:00
Euvd vendor
checkpoint
Cvss vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
First seen by Signal
2026-09-23T04:34:38+00:00
Euvd base score
9.8

Related Entities (245 · showing 23)

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-93616 (CVSS 9.8) — Ninja Signal Threat Intelligence | Ninja Signal