Check Point patches management-server zero-day used in targeted attacks

Check Point released a September 22 fix for CVE-2026-93616, a Security Management Server flaw that attackers exploited in a handful of targeted attacks on July 23. The path-traversal vulnerability lets an unauthenticated attacker with access to the server's web service upload and execute scripts; Check Point rated it 9.8 out of 10. Administrators must install the specific fix and inspect systems using Check Point's hunting guidance because patching does not reveal earlier compromise. The company did not identify the targets, attackers or actions taken after exploitation.