Vulnerability
Critical (CVSS 9.8) path traversal flaw in Check Point Security Management, Log Server and SmartEvent products; listed by CISA as exploited.
CISA added CVE-2026-93616, a 9.8-rated Check Point management flaw, to its Known Exploited Vulnerabilities catalog on September 22, 2026. A dev.to write-up says no final patch covers every release yet, so port exposure is the control.
Reality
TASK#STOMP, a Windows backdoor researchers dissected, uploads a victim's business documents and then stays to copy each new or edited one. Loss from a single infection keeps growing until someone finds and removes it.
Reality
The advisory confirming attacks on a Security Gateway VPN flaw three days after its September 9 fix also carries the first patch for a management path traversal that was used in targeted attacks in late July.
Perspective Coverage
6 publishersReality
Check Point says a handful of its customers have already been attacked through the Security Management Server, and F5 confirmed exploitation of BIG-IP APM when it disclosed the bug on September 22.
Reality
CVE-2026-93616 lets a remote attacker upload a file and execute a script on Check Point's management, log and SmartEvent servers with no credentials. Check Point says it observed targeted attacks on July 23, 2026.
Reality