Skip to content
Today
Sections

Project

Check Point Security Management Server

Check Point's management server and console, used to configure security policy and push it to the vendor's gateways.

Known aliases

  • Check Point Management Server
  • Multi-Domain Security Management Server
  • Quantum Security Management
  • Security Management Server
  • Smart-1 Cloud
  • SMS

Current stories

securityConfirmed5 publishers

Check Point patches two 9.8 VPN certificate flaws without naming what triggers them

Check Point assigned the CVE identifiers and the 9.8 scores itself and shipped fixes on September 9, so there is no outside read on how reachable the bugs are. Customers on R81.10 get neither a hotfix nor Live Patch.

Publishers:bleepingcomputer.com scworld.com securityaffairs.com securityweek.com thehackernews.com

Perspective Coverage

5 publishers
Builder
Builder 15%
Operator
Operator 74%
Investor
Investor 11%

Reality

Evidence60
Adoption
Not scored
Hype gap+20
Incentives45
Confidence62
securityConfirmed4 publishers

Check Point patches unauthenticated root code execution in Security Management and Log Server

CVE-2026-91843 lets an attacker with no credentials run code as root through the login process, and Check Point has published indicators of compromise while saying it has seen no exploitation in the wild.

Publishers:bleepingcomputer.com securityaffairs.com securityweek.com thehackernews.com

Perspective Coverage

4 publishers
Builder
Builder 16%
Operator
Operator 75%
Investor
Investor 9%

Reality

Evidence80
Adoption
Not scored
Hype gap+10
Incentives
Not scored
Confidence78
securityConfirmed6 publishers

Check Point patches a Security Management zero-day it saw exploited on July 23

The advisory confirming attacks on a Security Gateway VPN flaw three days after its September 9 fix also carries the first patch for a management path traversal that was used in targeted attacks in late July.

Publishers:bleepingcomputer.com blog.checkpoint.com helpnetsecurity.com securityaffairs.com securityweek.com thehackernews.com

Perspective Coverage

6 publishers
Builder
Builder 21%
Operator
Operator 70%
Investor
Investor 9%

Reality

Evidence72
Adoption
Not scored
Hype gap+5
Incentives60
Confidence70
buildOne report1 publisher

Unauthenticated requests to TCP/19009 run scripts on Check Point management servers

CVE-2026-93616 lets a remote attacker upload a file and execute a script on Check Point's management, log and SmartEvent servers with no credentials. Check Point says it observed targeted attacks on July 23, 2026.

Publishers:dev.to

Reality

Evidence60
Adoption35
Hype gap−8
Incentives50
Confidence55
buildOne report1 publisher

An ASN.1 heap overflow puts Check Point management servers in the same patch window as the gateways

The Dutch NCSC expects mass exploitation attempts on two CVSS 9.8 Check Point VPN flaws that run code before authentication. Both sit in certificate parsing, and one of them reaches the Security Management Server.

Publishers:dev.to

Reality

Evidence46
Adoption20
Hype gap+8
Incentives55
Confidence44