CVE-2026-93616— Directory Traversal and File upload allows execution of arbitrary script on the Management Server
Quick assessment
Affected
checkpoint Quantum Security Management
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.
Affected Version Matrix 11
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| checkpoint | Quantum Security Management | R82.20 with no Jumbo Hotfix |
affected |
R82.10 with Jumbo Hotfix Take 44 or below |
affected | ||
R82 with Jumbo Hotfix Take 126 or below |
affected | ||
R81.20 with Jumbo Hotfix Take 166 or below |
affected | ||
R81.10 (EOS) with Jumbo Hotfix Take 190 or below |
affected | ||
R81 (EOS) |
affected | ||
R80.40 (EOS) |
affected | ||
R80.30 (EOS) |
affected | ||
| … +3 more rows | |||
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-93616
Vulnerability Information
Shenlong is analyzing...
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Directory Traversal and File upload allows execution of arbitrary script on the Management Server
Source: CVE Program / CVE List V5
Vulnerability Description
A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| checkpoint | Quantum Security Management | R82.20 with no Jumbo Hotfix | - |
|
II. Public POCs for CVE-2026-93616
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-93616
请登录查看更多情报信息。
Other References for CVE-2026-93616 (1)
IV. Related Vulnerabilities
Same product: Quantum Security Management
-
CVE-2026-91843
Stack overflow in login process to the Security Management a -
CVE-2026-62144
Management Authentication Bypass and Privilege Escalation -
CVE-2026-16232
Authentication Bypass in the SmartConsole Login Process Usin -
CVE-2026-48136
Authenticated Administrator Role-Based Access Control Bypass
Same vendor: checkpoint
-
CVE-2026-91843
Stack overflow in login process to the Security Management a -
CVE-2026-85103
Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding -
CVE-2026-85102
Improper Certificate Validation in Quantum Security Gateway -
CVE-2026-18574
Authentication Bypass in Check Point Security Management Ser -
CVE-2026-62145
Local Privilege Escalation in Gaia Portal
Same weakness: CWE-22
-
CVE-2026-65829
MPXJ: Potential Path Traversal Vulnerability in Primavera P3 -
CVE-2026-34689
Adobe Connect | Improper Limitation of a Pathname to a Restr -
CVE-2026-77246
MCP Atlassian: MCP HTTP Client Server-Local File Exfiltratio -
CVE-2026-77248
MCP Atlassian: Unauthenticated arbitrary local file read via -
CVE-2026-77259
MCP Atlassian: Arbitrary file read via confluence_upload_att
V. Comments for CVE-2026-93616
No comments yet