CVE-2026-93616KEV · OVERDUECWE-22path-traversal

Check Point Multiple Products Path Traversal Vulnerability

Critical · published September 22, 2026

Patch now

Confirmed exploited, and the score agrees

CVSS calls it critical at 9.8. It is confirmed in active exploitation. It sits in the 99.5th percentile for exploit probability.

29
days past CISA
deadline
CVSS v3.1
9.8
EPSS
76%
Percentile
99.5
In the wild
Confirmed
What it is

A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.75872 · 99.5th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-09-22T17:17Z
KEV added
2026-09-22 · due 2026-09-25
Affected products (242)
ProductVersionsFixed in
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_management≥ r80, < r81.10r81.10
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/multi-domain_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_management≥ r80, < r81.10r81.10
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
checkpoint/quantum_security_managementall versions—
References (3)
EPSS history
Timeline
  • 17 OCT 03:34Z
    EPSS moved 20% → 76%
    epss
  • 16 OCT 03:33Z
    EPSS moved 20% → 76%
    epss
  • 27 SEP 03:28Z
    EPSS moved 2% → 20%
    epss
  • 26 SEP 03:27Z
    EPSS moved 2% → 20%
    epss
  • 24 SEP 03:25Z
    EPSS moved — → 2%
    epss
  • 22 SEP 12:59Z
    Directory Traversal and File upload allows execution of arbitrary script on the Management Server
    cvelistv5