Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks
-
Check Point has disclosed that attackers exploited a previously unknown vulnerability in its Security Management Server — the system used to manage firewall policies — during a small number of targeted attacks on July 23.
Tracked as CVE-2026-93616, the flaw allows an attacker with access to the server's web service to execute scripts on it without authentication. In other words, no login is required, provided the attacker can reach the web interface.
A fix for the issue was released on September 22. Given the management server's role in controlling firewall policy across an environment, unpatched instances should be treated as high priority.
- Review exposure of the Security Management Server web service to untrusted networks.
- Apply the vendor's fix as soon as possible if you have not already done so.
Source: The Hacker News
Has your organization already patched your Check Point management server, or are you still working through the update?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login