Check Point Patches Management Server Zero-Day Exploited in Targeted Attacks

Attackers exploited a previously unknown flaw, CVE-2026-93616, in Check Point’s Security Management Server during a handful of targeted attacks on July 23. The bug lets anyone with access to the server’s web service run scripts on it without logging in.

Check Point released a fix on September 22 for the management server that controls firewall policies. Organizations running Check Point Security Management Server should patch immediately given confirmed in-the-wild exploitation.