Description
A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
checkpoint Quantum Security Management
R82.20 with no Jumbo HotfixaffectedR82.10 with Jumbo Hotfix Take 44 or belowaffectedR82 with Jumbo Hotfix Take 126 or belowaffectedR81.20 with Jumbo Hotfix Take 166 or belowaffectedR81.10 (EOS) with Jumbo Hotfix Take 190 or belowaffectedR81 (EOS)affectedR80.40 (EOS)affectedR80.30 (EOS)affectedR80.20 (EOS)affectedR80.10 (EOS)affectedR80 (EOS)affected
References
- https://support.checkpoint.com/results/sk/sk1000171 ↗
- https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616/ ↗
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-93616 ↗