CVE-2026-93616

CriticalPublished

Directory Traversal and File upload allows execution of arbitrary script on the Management Server

Published: Sep 22, 2026
Updated: Sep 23, 2026
Assigning CNA: checkpoint
Evidence observed: Sep 22, 2026

Primary CVSS

9.8/ 10Critical

nvd · CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS probability estimate

75.9%

High · next 30 days

Percentile: 99.5%
Model date: Oct 17, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

CISA Known Exploited

This CVE appears in the CISA Known Exploited Vulnerabilities catalog.

Summary

A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.

Sources

Repository evidence: Files: 1 · Repositories: 1

1 Template

Check Point Security Management - Unauthenticated Directory Traversal to RCETemplate
http/cves/2026/CVE-2026-93616.yaml
Nuclei Templates
DetectionEvidence observed: Oct 14, 2026Revision: 17f5725dc10cRelated tool
Declared conditions
- network: http($.protocol_keys)
- verification: dsl($.matchers[*].type)

CVE-2026-93616-checkScanner
Safe unauthenticated patch-state checker for Check Point CPM RCE CVE-2026-93616; probes the UpgradeSvcRemote SOAP login on TCP 19009 without exploiting.
CVE-2026-93616_ChecksDetection

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.