[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fivxkJHfCZzcJyrBbUqXSqG8Bj9gxKeJgTavn9EliS3k":3},{"article":4,"iocs":44,"watch_terms":63,"solutions":64,"lesson":158},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"0aee106f-183d-4001-85c9-4914971a18a8","Check Point warns of Management Server zero-day exploited in attacks","check-point-warns-of-management-server-zero-day-exploited-in-attacks-20fee5","Check Point Software released emergency hotfixes to address a critical Security Management Server vulnerability that could let attackers run arbitrary scripts. [...]","Check Point Software has released emergency hotfixes for a critical zero-day vulnerability (CVE-2026-93616) in its Security Management Server. This path traversal flaw allows unauthenticated attackers to upload and execute arbitrary scripts, posing a significant risk to enterprise networks. The vulnerability is actively exploited in the wild, with Check Point confirming a handful of customer attacks.","Check Point warns of Security Management Server zero-day exploited in attacks","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fcheck-point-patches-management-server-zero-day-exploited-in-attacks\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F09\u002F18\u002FCheck-Point.jpg","2026-09-22T16:32:47+00:00","2026-09-22T18:00:12.450516+00:00",9,[17,20],{"name":18,"type":19},"Security Management Server","product",{"name":21,"type":22},"Check Point Software","vendor","574f766a-fb3f-487c-8d2c-0720ae75471b",{"id":23,"icon":25,"name":26,"slug":27},null,"Zero-day","zero-day",[29,34,39],{"category":30},{"id":31,"icon":25,"name":32,"slug":33},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":35},{"id":36,"icon":25,"name":37,"slug":38},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":40},{"id":41,"icon":25,"name":42,"slug":43},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[45,49,52,55,58,61],{"type":46,"value":47,"context":48},"cve","CVE-2026-93616","Path traversal vulnerability in Security Management Server",{"type":46,"value":50,"context":51},"CVE-2024-24919","Flaw in Check Point Quantum Security Gateways, exploited by ransomware",{"type":46,"value":53,"context":54},"CVE-2026-50751","Authentication bypass zero-day exploited by Qilin ransomware affiliate",{"type":46,"value":56,"context":57},"CVE-2026-16232","Second authentication bypass zero-day exploited for administrator privileges",{"type":46,"value":59,"context":60},"CVE-2026-85102","Critical Check Point VPN flaw",{"type":46,"value":62,"context":60},"CVE-2026-85103",[21,18],{"controls":65,"vendors":153},[66,95,124],{"slug":67,"name":68,"problem":69,"products":70},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[71,79,87],{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":96,"name":97,"problem":98,"products":99},"patch-management","Automated patch management","Known holes get closed in days, not months.",[100,108,116],{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"slug":125,"name":126,"problem":127,"products":128},"firewall","Next-generation firewall and intrusion prevention","Malicious traffic is blocked at the network edge and between zones.",[129,137,145],{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":133,"product_name":134,"url":135,"description":136},"check-point","Check Point","\u002Fvendor-logos\u002Fcheck-point.png","quantum-firewall","Quantum Force firewalls","https:\u002F\u002Fwww.checkpoint.com\u002Fquantum\u002Fnext-generation-firewall\u002F","Next-generation firewalls with threat prevention.",{"vendor_slug":138,"vendor_name":139,"vendor_logo":140,"product_slug":141,"product_name":142,"url":143,"description":144},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","next-generation-firewall","Next-Generation Firewalls","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fnetwork-security\u002Fnext-generation-firewall","Hardware, virtual and cloud firewalls running PAN-OS, with intrusion prevention.",{"vendor_slug":146,"vendor_name":147,"vendor_logo":148,"product_slug":149,"product_name":150,"url":151,"description":152},"clavister","Clavister","\u002Fvendor-logos\u002Fclavister.png","clavister-netwall","Clavister NetWall","https:\u002F\u002Fwww.clavister.com\u002Fproducts\u002Fclavister-netwall\u002F","Next-generation firewalls developed in Sweden.",[154],{"slug":130,"name":131,"logo_path":132,"roles":155},[156,157],"affected","reported_by",{"slug":159,"title":160,"body":161,"framework_refs":162,"framework_notes":176},"check-point-zero-day-exploited-unauthenticated-rce-via-path-traversal","Check Point Zero-Day Exploited: Unauthenticated RCE via Path Traversal","A critical zero-day vulnerability in Check Point's Security Management Server allowed unauthenticated attackers to exploit a path traversal flaw and execute arbitrary scripts, effectively bypassing all perimeter defenses at the management layer. This is particularly dangerous because security management servers are high-value targets — compromising one can give attackers control over an organization's entire security infrastructure. The fact that exploitation occurred before a patch was available highlights the need for compensating controls such as network segmentation and strict access restrictions around management interfaces. Zero-day vulnerabilities in security appliances are increasingly targeted by sophisticated threat actors who understand that compromising the tool meant to protect a network yields maximum impact.",[163,164,165,166,167,168,169,170,171,172,173,174,175],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","CIS Control 13: Network Monitoring and Defense","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management","NIST SI-2: Flaw Remediation","NIST SC-7: Boundary Protection","NIST AC-3: Access Enforcement","NIST AU-6: Audit Record Review, Analysis, and Reporting","ISO\u002FIEC 27001:2022 – A.8.8: Management of Technical Vulnerabilities","ISO\u002FIEC 27001:2022 – A.8.20: Network Security","ITIL 4: Change Enablement (Emergency Change process)","MITRE ATT&CK: T1190 – Exploit Public-Facing Application","MITRE ATT&CK: T1059 – Command and Scripting Interpreter",{}]