Directory Traversal and File upload allows execution of arbitrary script on the Management Server

Summary

CVE	CVE-2026-93616
State	PUBLISHED
Assigner	checkpoint
Source Priority	CVE Program / NVD first with legacy fallback
Published	2026-09-22 13:17:11 UTC
Updated	2026-09-23 16:38:38 UTC
Description	A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.

Risk And Classification

Primary CVSS: v3.1 9.8 CRITICAL from [email protected]

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.024220000 probability, percentile 0.834800000 (date 2026-09-23)

CISA KEV: Listed on 2026-09-22; due 2026-09-25; ransomware use Unknown

Problem Types: CWE-22 | CWE-22 CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal').

Version	Source	Type	Score	Severity	Vector
3.1	[email protected]	Secondary	9.8	CRITICAL	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
3.1	CNA	CVSS	9.8	CRITICAL	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`

CVSS v3.1 Breakdown

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA Known Exploited Vulnerability

Vendor	Check Point
Product	Multiple Products
Name	Check Point Multiple Products Path Traversal Vulnerability
Required Action	Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Notes	https://support.checkpoint.com/results/sk/sk1000171/ ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-93616

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Checkpoint	Multi-domain Security Management	All	All	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	-	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_106	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_107	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_109	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_110	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_113	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_128	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_129	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_130	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_131	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_132	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_135	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_139	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_14	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_141	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_150	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_152	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_156	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_158	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_165	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_169	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_170	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_171	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_172	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_173	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_174	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_177	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_181	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_183	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_187	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_190	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_22	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_30	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_38	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_44	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_45	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_55	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_61	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_66	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_75	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_78	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_79	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_81	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_82	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_85	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_87	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_9	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_93	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_94	All	All
Application	Checkpoint	Multi-domain Security Management	r81.10	take_95	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	-	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_10	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_101	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_103	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_105	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_111	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_113	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_115	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_118	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_119	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_120	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_122	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_126	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_127	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_14	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_141	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_146	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_158	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_161	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_166	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_24	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_26	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_38	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_41	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_43	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_45	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_53	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_54	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_65	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_70	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_76	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_79	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_8	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_84	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_89	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_90	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_92	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_96	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_98	All	All
Application	Checkpoint	Multi-domain Security Management	r81.20	take_99	All	All
Application	Checkpoint	Multi-domain Security Management	r82	-	All	All
Application	Checkpoint	Multi-domain Security Management	r82	take_10	All	All
Application	Checkpoint	Multi-domain Security Management	r82	take_103	All	All
Application	Checkpoint	Multi-domain Security Management	r82	take_107	All	All
Application	Checkpoint	Multi-domain Security Management	r82	take_118	All	All
Application	Checkpoint	Multi-domain Security Management	r82	take_12	All	All
Application	Checkpoint	Multi-domain Security Management	r82	take_122	All	All
Application	Checkpoint	Multi-domain Security Management	r82	take_126	All	All
Application	Checkpoint	Multi-domain Security Management	r82	take_14	All	All
Application	Checkpoint	Multi-domain Security Management	r82	take_18	All	All
Application	Checkpoint	Multi-domain Security Management	r82	take_19	All	All
Application	Checkpoint	Multi-domain Security Management	r82	take_25	All	All
Application	Checkpoint	Multi-domain Security Management	r82	take_33	All	All
Application	Checkpoint	Multi-domain Security Management	r82	take_34	All	All
Application	Checkpoint	Multi-domain Security Management	r82	take_36	All	All
Application	Checkpoint	Multi-domain Security Management	r82	take_39	All	All
Application	Checkpoint	Multi-domain Security Management	r82	take_41	All	All
Application	Checkpoint	Multi-domain Security Management	r82	take_43	All	All
Application	Checkpoint	Multi-domain Security Management	r82	take_44	All	All
Application	Checkpoint	Multi-domain Security Management	r82	take_60	All	All
Application	Checkpoint	Multi-domain Security Management	r82	take_73	All	All
Application	Checkpoint	Multi-domain Security Management	r82	take_91	All	All
Application	Checkpoint	Multi-domain Security Management	r82.10	-	All	All
Application	Checkpoint	Multi-domain Security Management	r82.10	take_19	All	All
Application	Checkpoint	Multi-domain Security Management	r82.10	take_24	All	All
Application	Checkpoint	Multi-domain Security Management	r82.10	take_36	All	All
Application	Checkpoint	Multi-domain Security Management	r82.10	take_40	All	All
Application	Checkpoint	Multi-domain Security Management	r82.10	take_44	All	All
Application	Checkpoint	Multi-domain Security Management	r82.10	take_6	All	All
Application	Checkpoint	Multi-domain Security Management	r82.20	-	All	All
Application	Checkpoint	Quantum Security Management	All	All	All	All
Application	Checkpoint	Quantum Security Management	r81.10	-	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_106	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_107	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_109	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_110	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_113	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_128	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_129	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_130	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_131	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_132	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_135	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_139	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_14	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_141	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_150	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_152	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_156	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_158	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_165	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_169	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_170	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_171	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_172	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_173	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_174	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_177	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_181	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_183	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_187	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_190	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_22	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_30	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_38	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_44	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_45	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_55	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_61	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_66	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_75	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_78	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_79	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_81	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_82	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_85	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_87	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_9	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_93	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_94	All	All
Application	Checkpoint	Quantum Security Management	r81.10	take_95	All	All
Application	Checkpoint	Quantum Security Management	r81.20	-	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_10	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_101	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_103	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_105	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_111	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_113	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_115	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_118	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_119	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_120	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_122	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_126	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_127	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_14	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_141	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_146	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_158	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_161	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_166	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_24	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_26	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_38	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_41	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_43	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_45	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_53	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_54	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_65	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_70	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_76	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_79	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_8	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_84	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_89	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_90	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_92	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_96	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_98	All	All
Application	Checkpoint	Quantum Security Management	r81.20	take_99	All	All
Application	Checkpoint	Quantum Security Management	r82	-	All	All
Application	Checkpoint	Quantum Security Management	r82	take_10	All	All
Application	Checkpoint	Quantum Security Management	r82	take_103	All	All
Application	Checkpoint	Quantum Security Management	r82	take_107	All	All
Application	Checkpoint	Quantum Security Management	r82	take_118	All	All
Application	Checkpoint	Quantum Security Management	r82	take_12	All	All
Application	Checkpoint	Quantum Security Management	r82	take_122	All	All
Application	Checkpoint	Quantum Security Management	r82	take_126	All	All
Application	Checkpoint	Quantum Security Management	r82	take_14	All	All
Application	Checkpoint	Quantum Security Management	r82	take_18	All	All
Application	Checkpoint	Quantum Security Management	r82	take_19	All	All
Application	Checkpoint	Quantum Security Management	r82	take_25	All	All
Application	Checkpoint	Quantum Security Management	r82	take_33	All	All
Application	Checkpoint	Quantum Security Management	r82	take_34	All	All
Application	Checkpoint	Quantum Security Management	r82	take_36	All	All
Application	Checkpoint	Quantum Security Management	r82	take_39	All	All
Application	Checkpoint	Quantum Security Management	r82	take_41	All	All
Application	Checkpoint	Quantum Security Management	r82	take_43	All	All
Application	Checkpoint	Quantum Security Management	r82	take_44	All	All
Application	Checkpoint	Quantum Security Management	r82	take_60	All	All
Application	Checkpoint	Quantum Security Management	r82	take_73	All	All
Application	Checkpoint	Quantum Security Management	r82	take_91	All	All
Application	Checkpoint	Quantum Security Management	r82.10	-	All	All
Application	Checkpoint	Quantum Security Management	r82.10	take_19	All	All
Application	Checkpoint	Quantum Security Management	r82.10	take_24	All	All
Application	Checkpoint	Quantum Security Management	r82.10	take_36	All	All
Application	Checkpoint	Quantum Security Management	r82.10	take_40	All	All
Application	Checkpoint	Quantum Security Management	r82.10	take_44	All	All
Application	Checkpoint	Quantum Security Management	r82.10	take_6	All	All
Application	Checkpoint	Quantum Security Management	r82.20	-	All	All

Vendor Declared Affected Products

Source	Vendor	Product	Version	Platforms
CNA	Checkpoint	Quantum Security Management	affected R82.20 with no Jumbo Hotfix	Not specified
CNA	Checkpoint	Quantum Security Management	affected R82.10 with Jumbo Hotfix Take 44 or below	Not specified
CNA	Checkpoint	Quantum Security Management	affected R82 with Jumbo Hotfix Take 126 or below	Not specified
CNA	Checkpoint	Quantum Security Management	affected R81.20 with Jumbo Hotfix Take 166 or below	Not specified
CNA	Checkpoint	Quantum Security Management	affected R81.10 (EOS) with Jumbo Hotfix Take 190 or below	Not specified
CNA	Checkpoint	Quantum Security Management	affected R81 (EOS)	Not specified
CNA	Checkpoint	Quantum Security Management	affected R80.40 (EOS)	Not specified
CNA	Checkpoint	Quantum Security Management	affected R80.30 (EOS)	Not specified
CNA	Checkpoint	Quantum Security Management	affected R80.20 (EOS)	Not specified
CNA	Checkpoint	Quantum Security Management	affected R80.10 (EOS)	Not specified
CNA	Checkpoint	Quantum Security Management	affected R80 (EOS)	Not specified

References

Reference	Source	Link	Tags
support.checkpoint.com/results/sk/sk1000171	[email protected]	support.checkpoint.com	Mitigation, Patch, Vendor Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalog	134c704f-9b21-4f2e-91b3-4a467353bcc0	www.cisa.gov	US Government Resource
blog.checkpoint.com/security/security-advisory-action-required-active-exploitatio...	134c704f-9b21-4f2e-91b3-4a467353bcc0	blog.checkpoint.com	Vendor Advisory
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis
CISA Known Exploited Vulnerabilities catalog	CISA	www.cisa.gov	kev

No vendor comments have been submitted for this CVE.

Additional Advisory Data

Source	Time	Event
ADP	2026-09-22T00:00:00.000Z	CVE-2026-93616 added to CISA KEV

There are currently no legacy QID mappings associated with this CVE.