Emergency fix released for Check Point management-server flaw amid reported attacks

An emergency fix for unauthenticated script execution

Check Point released emergency hotfixes for CVE-2026-93616, a path traversal vulnerability in Security Management Server and related products. Path traversal is a weakness that can let an attacker access or place files in unintended locations. According to the report, an unauthenticated attacker could upload and run arbitrary scripts on vulnerable management servers. Check Point said the flaw is exploited in the wild and that it knows of a handful of attacked customers.

Before the newly released update, affected Check Point management products did not have the R82.20 Security Hotfix for CVE-2026-93616 available.

Check Point has released the R82.20 Security Hotfix and temporary mitigations for CVE-2026-93616 after warning that the flaw is being exploited in the wild.

Security Management Server centrally stores security policies, processes administrator changes, and collects logs across enterprise networks. The reported active exploitation and availability of an emergency fix create an immediate remediation decision for organizations using affected products.