Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Directory Traversal and File upload allows execution of arbitrary script on the Management Server

CVSS 3.1 9.8 CRITICALCheck source for fixed versionsKEV status unknown

Historical advisory recorded 23 Oct 2026 15:48:27 UTC. Read the latest advisory.

cve-program · CVE-2026-93616

Published

A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-93616

Published

Quantum Security Management

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "product": "Quantum Security Management",
                    "vendor": "checkpoint",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "R82.20 with no Jumbo Hotfix"
                        },
                        {
                            "status": "affected",
                            "version": "R82.10 with Jumbo Hotfix Take 44 or below"
                        },
                        {
                            "status": "affected",
                            "version": "R82 with Jumbo Hotfix Take 126 or below"
                        },
                        {
                            "status": "affected",
                            "version": "R81.20 with Jumbo Hotfix Take 166 or below"
                        },
                        {
                            "status": "affected",
                            "version": "R81.10 (EOS) with Jumbo Hotfix Take 190 or below"
                        },
                        {
                            "status": "affected",
                            "version": "R81 (EOS)"
                        },
                        {
                            "status": "affected",
                            "version": "R80.40 (EOS)"
                        },
                        {
                            "status": "affected",
                            "version": "R80.30 (EOS)"
                        },
                        {
                            "status": "affected",
                            "version": "R80.20 (EOS)"
                        },
                        {
                            "status": "affected",
                            "version": "R80.10 (EOS)"
                        },
                        {
                            "status": "affected",
                            "version": "R80 (EOS)"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 12 Nov 19:39 UTC · 274 of 275 readable · 272 fully read · documentation 469/469 current