CVE-2026-93616

Check Point products allow unauthenticated attackers to upload and execute arbitrary scripts via a path traversal vulnerability.

A path traversal flaw in Check Point's Security Management Server and related products lets unauthenticated attackers upload and run arbitrary scripts, enabling remote code execution. DIB organizations must urgently patch these products to prevent attackers from gaining full control of security infrastructure, which could compromise network segmentation and data protection. This is not a zero-day as it is already in CISA's KEV catalog, but its active exploitation underscores the need for immediate remediation.

Shame score — A critical path traversal flaw allowing unauthenticated remote code execution in widely deployed security products, now actively exploited and cataloged by CISA, represents a severe negligence failure in patch management and product hardening.