<![CDATA[Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks]]>Check Point has disclosed that attackers exploited a previously unknown vulnerability in its Security Management Server — the system used to manage firewall policies — during a small number of targeted attacks on July 23.

Tracked as CVE-2026-93616, the flaw allows an attacker with access to the server's web service to execute scripts on it without authentication. In other words, no login is required, provided the attacker can reach the web interface.

A fix for the issue was released on September 22. Given the management server's role in controlling firewall policy across an environment, unpatched instances should be treated as high priority.

  • Review exposure of the Security Management Server web service to untrusted networks.
  • Apply the vendor's fix as soon as possible if you have not already done so.

Source: The Hacker News

Has your organization already patched your Check Point management server, or are you still working through the update?

]]>https://xploitlk.com/topic/433/check-point-warns-of-management-server-zero-day-exploited-in-targeted-attacksRSS for NodeTue, 27 Oct 2026 11:03:59 GMTWed, 23 Sep 2026 04:30:27 GMT60