CrowdSecLive Exploit Tracker
Insufficient DataCVE-2026-93616Public Exploit

Quantum Security Management - Path Traversal (CVE-2026-93616)

PublishedSep 22, 2026
First SeenOct 21, 2026
Last Seen
Reported
CVSS9.8
Checkpoint
CheckpointQuantum Security Management
firewallmanagement_panel

Description

A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.

psychologyCrowdSec Analysis

CVE-2026-93616 is a critical directory traversal and file upload vulnerability in Check Point Quantum Security Management. It may allow unauthenticated attackers to upload and execute arbitrary scripts remotely on the Management Server, potentially compromising its confidentiality, integrity, and availability.

CrowdSec has been tracking this vulnerability and its exploits since 20th of October 2026.

CrowdSec has not observed any significant exploitation activity targeting CVE-2026-93616 across its network. As a result, no community-driven trend analysis is available for this vulnerability at this time.

Observed probing targets the /cpmws/UpgradeSvcRemote SOAP endpoint with a loginAsApplicationReadOnlyPublicSession request. The request includes a crafted targetVersion value to identify the vulnerable Check Point Management service.

lock

Full Intelligence Available

Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.

EventDate
CVE Published2026-09-22
CISA KEV2026-09-22
CISA Remediation Deadline2026-09-25
Rule Released2026-10-20

Related Weaknesses

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

arrow_forward

Remediation & Protection

lock to download blocklists, subscribe to firewalls, and access IP intelligence.

External References