https://vulnerability.circl.lu/sightings/feed 2026-09-25T18:19:32.812422+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/c331b0b8-655a-4874-84b6-6aecc8650bb3/export 2026-09-25T18:19:32.832928+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c331b0b8-655a-4874-84b6-6aecc8650bb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/br4inde4d.bsky.social/post/3mwe3pn6irc2j", "content": "Sneak preview - we fully exploited CVE-2026-93616, an unauthenticated root RCE in Check Point Security Management Server. Blog post coming soon!", "creation_timestamp": "2026-09-25T15:32:07.786459Z"} 2026-09-25T15:32:07.786459+00:00 https://vulnerability.circl.lu/sighting/a0a7fa62-c3d2-4967-acdf-db6222836f5d/export 2026-09-25T18:19:32.835587+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a0a7fa62-c3d2-4967-acdf-db6222836f5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mwd3koe3r22l", "content": "\u26a1 CERT-FR : deux RCE activement exploit\u00e9es \u2014 Check Point Security Management Server (CVE-2026-93616) et F5 BIG-IP (CVE-2026-94127). IoC publi\u00e9s.\n\n\ud83d\udd17 https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1219/\n\ud83d\udd17 https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1220/", "creation_timestamp": "2026-09-25T05:56:40.300158Z"} 2026-09-25T05:56:40.300158+00:00 https://vulnerability.circl.lu/sighting/fb5f9088-1d87-4582-a20c-c3d6a9a28748/export 2026-09-25T18:19:32.835959+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "fb5f9088-1d87-4582-a20c-c3d6a9a28748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mwbkuauq7z2y", "content": "\ud83d\udd34 EXPLOITED\n\nCheck Point is patching two flaws in its firewalls and management servers, both 9.8 and both exploited now.\n\nOne ran silent as a zero-day for two months.\n\nPatch, then hunt: the fix won't tell you if you were already hit. (CVE-2026-93616 / CVE-2026-85102)", "creation_timestamp": "2026-09-24T15:25:09.279923Z"} 2026-09-24T15:25:09.279923+00:00 https://vulnerability.circl.lu/sighting/fdfc3b62-91e2-4767-bfb6-56fcf789092f/export 2026-09-25T18:19:32.836233+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "fdfc3b62-91e2-4767-bfb6-56fcf789092f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93616", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mwb37q7ewl2t", "content": "Check Point patches a 9.8-severity management server zero-day. Path traversal enables unauthenticated script execution. CISA\u2026 https://0daynews.com/articles/2026-09-23-check-point-mgmt-cve-2026-93616-kev-rce/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-3417", "creation_timestamp": "2026-09-24T10:45:14.708996Z"} 2026-09-24T10:45:14.708996+00:00 https://vulnerability.circl.lu/sighting/0610ddf6-b01b-4a79-bf4f-bcf329c0a616/export 2026-09-25T18:19:32.836490+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0610ddf6-b01b-4a79-bf4f-bcf329c0a616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://t.me/bizone_channel/2947", "content": "\ud83d\udd3a \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Check Point\n\n\u0421 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043d\u0435\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u043c\u0443 \u043a\u043e\u043d\u0442\u0443\u0440\u0443 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 \u0438 VPN-\u0448\u043b\u044e\u0437\u043e\u0432.\n\n\u041f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 Check Point, \u0432 \u0438\u044e\u043b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0442\u043e\u0447\u0435\u0447\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\nCVE-2026-93616 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 9,8 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS.\n\n\u27a1\ufe0f\u041a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0438 \u043a\u0430\u043a\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u2014 \u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435\n\n\ud83d\udcac \u041c\u044b \u0432 MAX", "creation_timestamp": "2026-09-24T10:40:40.000000Z"} 2026-09-24T10:40:40+00:00 https://vulnerability.circl.lu/sighting/5566d468-e667-4f6f-86fc-01c85d774862/export 2026-09-25T18:19:32.836714+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5566d468-e667-4f6f-86fc-01c85d774862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mwaocrxpjs2d", "content": "Attackers hit Check Point Management Servers and Spark firewalls, F5 BIG-IP APM instances\n\nCheck Point Software has released emergency fixes for a critical Check Point Management Server vulnerability (CVE-2026-93616) that has been exploited as far back as July 23, 2026. The compan\u2026\n#hackernews #news", "creation_timestamp": "2026-09-24T06:54:18.369268Z"} 2026-09-24T06:54:18.369268+00:00 https://vulnerability.circl.lu/sighting/14e07827-a42c-4181-93aa-63e55ef42067/export 2026-09-25T18:19:32.836824+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "14e07827-a42c-4181-93aa-63e55ef42067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/calimegai.bsky.social/post/3mwao4nez5t2t", "content": "\u26a0\ufe0f #CheckPoint alerte sur une faille zero-day (CVE-2026-93616) exploit\u00e9e le 23/07. Elle permet l\u2019ex\u00e9cution de scripts sans authentification sur son serveur de gestion. Correctif publi\u00e9 le 22/09. #CyberSecurity #Automatisation ", "creation_timestamp": "2026-09-24T06:50:51.441078Z"} 2026-09-24T06:50:51.441078+00:00 https://vulnerability.circl.lu/sighting/4421476c-a39a-4391-b264-73039e84fbf0/export 2026-09-25T18:19:32.836922+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "4421476c-a39a-4391-b264-73039e84fbf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://t.me/CyberDispatch/3071", "content": "Check Point is warning customers about a newly disclosed Security Management Server zero-day exploited in targeted attacks in July.\n\nCVE-2026-93616 lets an attacker who can reach the web service upload and run scripts without logging in. A fix landed Sept. 22.", "creation_timestamp": "2026-09-24T06:26:20.000000Z"} 2026-09-24T06:26:20+00:00 https://vulnerability.circl.lu/sighting/dfc24e5d-8543-4b9a-ab33-959b6ae670b2/export 2026-09-25T18:19:32.837017+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "dfc24e5d-8543-4b9a-ab33-959b6ae670b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "exploited", "source": "https://t.me/CyberDispatch/3071", "content": "Check Point is warning customers about a newly disclosed Security Management Server zero-day exploited in targeted attacks in July.\n\nCVE-2026-93616 lets an attacker who can reach the web service upload and run scripts without logging in. A fix landed Sept. 22.", "creation_timestamp": "2026-09-24T06:26:20.000000Z"} 2026-09-24T06:26:20+00:00 https://vulnerability.circl.lu/sighting/aefe4d3e-c0b1-473f-8ecf-bb0b510731c6/export 2026-09-25T18:19:32.837111+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "aefe4d3e-c0b1-473f-8ecf-bb0b510731c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwai2tnmab23", "content": "Daily IT Security Digest \u2014 2026-09-24\nsignificant vulnerabilities emerged: VMware vCenter has CVE-2026-59309 and CVE-2026-59310 affecting management infrastructure, while Check Point Management (CVE-2026-93616) exposes a critical RCE allowing arbitrary script execution on management servers. Both", "creation_timestamp": "2026-09-24T05:02:28.386361Z"} 2026-09-24T05:02:28.386361+00:00