CVE-2026-93616 (GCVE-0-2026-93616)
Vulnerability from cvelistv5 – Published: 2026-09-22 12:59 – Updated: 2026-09-23 03:55- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal').
| URL | Tags |
|---|---|
| https://support.checkpoint.com/results/sk/sk1000171 | |
| https://blog.checkpoint.com/security/security-adv… | vendor-advisory |
| https://www.cisa.gov/known-exploited-vulnerabilit… | government-resource |
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| checkpoint | Quantum Security Management |
Affected:
R82.20 with no Jumbo Hotfix
Affected: R82.10 with Jumbo Hotfix Take 44 or below Affected: R82 with Jumbo Hotfix Take 126 or below Affected: R81.20 with Jumbo Hotfix Take 166 or below Affected: R81.10 (EOS) with Jumbo Hotfix Take 190 or below Affected: R81 (EOS) Affected: R80.40 (EOS) Affected: R80.30 (EOS) Affected: R80.20 (EOS) Affected: R80.10 (EOS) Affected: R80 (EOS) |
guessed |
CISA
Known Exploited Vulnerability - GCVE BCP-07 Compliant
Exploited: Yes
Timestamps
Scope
Evidence
Type: Vendor Report
Signal: Successful Exploitation
Confidence: 80%
Source: cisa-kev
Details
| Cwes | CWE-22 |
|---|---|
| Feed | CISA Known Exploited Vulnerabilities Catalog |
| Product | Multiple Products |
| Due Date | 2026-09-25 |
| Date Added | 2026-09-22 |
| Vendorproject | Check Point |
| Vulnerabilityname | Check Point Multiple Products Path Traversal Vulnerability |
| Knownransomwarecampaignuse | Unknown |
References
ENISA
Known Exploited Vulnerability - GCVE BCP-07 Compliant
Exploited: Yes
Timestamps
Scope
Evidence
Type: Csirt Report
Signal: Successful Exploitation
Confidence: 75%
Source: enisa-cnw-kev
Details
| Cwes | CWE-22 |
|---|---|
| Euvd | EUVD-2026-84375 |
| Notes | https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616/ |
| Catalog | ENISA / EU CSIRTs Network (CNW) KEV JSON |
| Product | Quantum Security Gateway |
| Datereported | 2026/09/22 |
| Originsource | ENISA |
| Patchedsince | 2026/09/09 |
| Vendorproject | checkpoint |
| Exploitationtype | unknown |
| Vulnerabilityname | |
| Threatactorsexploiting |
References
Previdian
Known Exploited Vulnerability - GCVE BCP-07 Compliant
Exploited: Yes
Timestamps
Scope
Evidence
Type: Public Report
Signal: Successful Exploitation
Confidence: 70%
Source: previdian
Details
| Feed | Previdian (previdian.com) |
|---|---|
| Title | Directory Traversal and File upload allows execution of arbitrary script on the Management Server |
| Cve Id | CVE-2026-93616 |
| Vendor | Checkpoint |
| Ghsa Id | GHSA-X5GQ-4CXX-RF2R |
| Product | Quantum Security Management |
| Added Date | 2026-09-22T13:50:06.963Z |
| Cvss Score | 9.8 |
| Epss Score | None |
| Previous Ids | |
| Cvss Severity | CRITICAL |
| Virtual Patch | False |
| Cvss Estimated | False |
| Epss Percentile | None |
| Used In Malware | unknown |
| Vulnerability Id | CVE-2026-93616 |
| Ahead Of Cisa Kev |
|
| Not Yet In Cisa Kev | False |
References
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-93616",
"options": [
{
"Exploitation": "active"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-22T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
},
{
"other": {
"content": {
"dateAdded": "2026-09-22",
"reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-93616"
},
"type": "kev"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-23T03:55:59.259Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616/"
},
{
"tags": [
"government-resource"
],
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-93616"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-09-22T00:00:00.000Z",
"value": "CVE-2026-93616 added to CISA KEV"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Quantum Security Management",
"vendor": "checkpoint",
"versions": [
{
"status": "affected",
"version": "R82.20 with no Jumbo Hotfix"
},
{
"status": "affected",
"version": "R82.10 with Jumbo Hotfix Take 44 or below"
},
{
"status": "affected",
"version": "R82 with Jumbo Hotfix Take 126 or below"
},
{
"status": "affected",
"version": "R81.20 with Jumbo Hotfix Take 166 or below"
},
{
"status": "affected",
"version": "R81.10 (EOS) with Jumbo Hotfix Take 190 or below"
},
{
"status": "affected",
"version": "R81 (EOS)"
},
{
"status": "affected",
"version": "R80.40 (EOS)"
},
{
"status": "affected",
"version": "R80.30 (EOS)"
},
{
"status": "affected",
"version": "R80.20 (EOS)"
},
{
"status": "affected",
"version": "R80.10 (EOS)"
},
{
"status": "affected",
"version": "R80 (EOS)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027).",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-22T12:59:01.057Z",
"orgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
"shortName": "checkpoint"
},
"references": [
{
"url": "https://support.checkpoint.com/results/sk/sk1000171"
}
],
"title": "Directory Traversal and File upload allows execution of arbitrary script on the Management Server",
"x_generator": {
"engine": "cvelib 1.8.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
"assignerShortName": "checkpoint",
"cveId": "CVE-2026-93616",
"datePublished": "2026-09-22T12:59:01.057Z",
"dateReserved": "2026-09-18T11:08:38.818Z",
"dateUpdated": "2026-09-23T03:55:59.259Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-93616",
"date": "2026-09-23",
"epss": "0.02422",
"percentile": "0.8348"
},
"nvd": {
"cve": {
"affected": [
{
"affectedData": [
{
"product": "Quantum Security Management",
"vendor": "checkpoint",
"versions": [
{
"status": "affected",
"version": "R82.20 with no Jumbo Hotfix"
},
{
"status": "affected",
"version": "R82.10 with Jumbo Hotfix Take 44 or below"
},
{
"status": "affected",
"version": "R82 with Jumbo Hotfix Take 126 or below"
},
{
"status": "affected",
"version": "R81.20 with Jumbo Hotfix Take 166 or below"
},
{
"status": "affected",
"version": "R81.10 (EOS) with Jumbo Hotfix Take 190 or below"
},
{
"status": "affected",
"version": "R81 (EOS)"
},
{
"status": "affected",
"version": "R80.40 (EOS)"
},
{
"status": "affected",
"version": "R80.30 (EOS)"
},
{
"status": "affected",
"version": "R80.20 (EOS)"
},
{
"status": "affected",
"version": "R80.10 (EOS)"
},
{
"status": "affected",
"version": "R80 (EOS)"
}
]
}
],
"source": "cve@checkpoint.com"
}
],
"cisaActionDue": "2026-09-25",
"cisaExploitAdd": "2026-09-22",
"cisaRequiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset\u0027s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
"cisaVulnerabilityName": "Check Point Multiple Products Path Traversal Vulnerability",
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:*:*:*:*:*:*:*:*",
"matchCriteriaId": "46543FA9-C054-4F64-B6A9-37191C09C8BC",
"versionEndExcluding": "r81.10",
"versionStartIncluding": "r80",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:-:*:*:*:*:*:*",
"matchCriteriaId": "A2428B4E-3754-44B5-9C21-AE9F7746A440",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_106:*:*:*:*:*:*",
"matchCriteriaId": "BA42413E-A16A-4D83-BD08-C44D2272B352",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_107:*:*:*:*:*:*",
"matchCriteriaId": "B55EFDA0-B970-4EB0-A1B8-FE10E3FF1D39",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_109:*:*:*:*:*:*",
"matchCriteriaId": "8A5711F6-13C5-4C50-ADE2-8E9465BEABCB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_110:*:*:*:*:*:*",
"matchCriteriaId": "8F71DADF-125C-458F-81E2-A572527C10C6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_113:*:*:*:*:*:*",
"matchCriteriaId": "2C1FE1CC-4FA9-420A-8F7A-E180027F1A33",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_128:*:*:*:*:*:*",
"matchCriteriaId": "C38E5B49-3074-48F3-A623-7C86C27204C6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_129:*:*:*:*:*:*",
"matchCriteriaId": "CD9E8386-0220-4A94-87FD-D9E663983AFA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_130:*:*:*:*:*:*",
"matchCriteriaId": "A5ACC58D-34A8-4D04-98C6-8DFF9465DC60",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_131:*:*:*:*:*:*",
"matchCriteriaId": "78074569-7B81-440B-BEDA-5F1B6002CA57",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_132:*:*:*:*:*:*",
"matchCriteriaId": "CD9E6258-DF53-4E47-9DE5-109F3E5F5A71",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_135:*:*:*:*:*:*",
"matchCriteriaId": "BB44CD33-CDC4-4D51-A897-2EF8E108546B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_139:*:*:*:*:*:*",
"matchCriteriaId": "8DBDF8B8-5A70-427B-91F1-7678D3CC281C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_14:*:*:*:*:*:*",
"matchCriteriaId": "964C5CDC-D605-4A4F-B1E8-92BE59EDA34A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_141:*:*:*:*:*:*",
"matchCriteriaId": "B6A031A8-D79B-461C-A613-C9D922709A8C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_150:*:*:*:*:*:*",
"matchCriteriaId": "4DACDF4E-DDDF-4C32-9E36-8F41370BDBBA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_152:*:*:*:*:*:*",
"matchCriteriaId": "C25851DF-54C5-40EE-BCFF-3E65EBBB1564",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_156:*:*:*:*:*:*",
"matchCriteriaId": "B029BBE5-EAEC-4E10-A7FE-45ABB458D85B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_158:*:*:*:*:*:*",
"matchCriteriaId": "75529BA5-943C-46D6-9C33-18D1EEB8063A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_165:*:*:*:*:*:*",
"matchCriteriaId": "F08CD952-5857-4C7D-8982-389A9DCC8309",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_169:*:*:*:*:*:*",
"matchCriteriaId": "75BBDB88-78C3-47E1-848C-B8BAA7B284E0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_170:*:*:*:*:*:*",
"matchCriteriaId": "AB9581B4-B2FA-4946-9674-391FE35E5B67",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_171:*:*:*:*:*:*",
"matchCriteriaId": "5E34C44D-5F7A-4260-9B48-D333932F9A61",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_172:*:*:*:*:*:*",
"matchCriteriaId": "5C9D465A-61AF-4921-B814-9917F7ADE4CA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_173:*:*:*:*:*:*",
"matchCriteriaId": "4B3D629E-119E-46DE-ACF0-F939E0E44B32",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_174:*:*:*:*:*:*",
"matchCriteriaId": "F55AD3DF-EE8A-421D-B430-77ABC7670AB4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_177:*:*:*:*:*:*",
"matchCriteriaId": "AB895616-A0B0-4CF8-A915-AEFBFADECF75",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_181:*:*:*:*:*:*",
"matchCriteriaId": "11BD9477-949D-436C-A724-7C0DD5755C1A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_183:*:*:*:*:*:*",
"matchCriteriaId": "20A8D3F6-45C7-4985-8EF2-399274E6466A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_187:*:*:*:*:*:*",
"matchCriteriaId": "043058AE-6D16-494F-8489-B9F87F0CBDD9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_190:*:*:*:*:*:*",
"matchCriteriaId": "CFC597DF-66DC-46E7-A31A-82D253A70E7F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_22:*:*:*:*:*:*",
"matchCriteriaId": "8793BA9A-096E-4E58-A73C-E60C6E010019",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_30:*:*:*:*:*:*",
"matchCriteriaId": "993ECDA4-9028-46DB-853E-AF07153A6F94",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_38:*:*:*:*:*:*",
"matchCriteriaId": "7A4F9499-F5B5-4CA3-BED3-F2909AEB7F7C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_44:*:*:*:*:*:*",
"matchCriteriaId": "4809F58C-906A-4DFB-8520-EC92A4A6FE43",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_45:*:*:*:*:*:*",
"matchCriteriaId": "3EDB5D74-5C06-472B-A442-D9940B7885D0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_55:*:*:*:*:*:*",
"matchCriteriaId": "CEB4451F-3296-49E8-B171-BD06167C16D0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_61:*:*:*:*:*:*",
"matchCriteriaId": "FA3DEADA-8C44-4F7D-BE4D-004C3B97950C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_66:*:*:*:*:*:*",
"matchCriteriaId": "FFFA1CC6-612A-4701-BFE1-B7AC97B2921F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_75:*:*:*:*:*:*",
"matchCriteriaId": "1778DF16-6C1E-4228-ACF8-EC94EF0BC884",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_78:*:*:*:*:*:*",
"matchCriteriaId": "EABB856E-E059-493F-B359-ED9FE39E2637",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_79:*:*:*:*:*:*",
"matchCriteriaId": "AE129711-6F49-4A3E-A0A1-F64A7655E18F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_81:*:*:*:*:*:*",
"matchCriteriaId": "EAC196AC-EF63-43F9-BE27-11807E4200DC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_82:*:*:*:*:*:*",
"matchCriteriaId": "527ED156-030A-4785-811A-9A1D226B9F76",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_85:*:*:*:*:*:*",
"matchCriteriaId": "C99694F6-A7D0-47A4-BC54-938BC81F7D54",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_87:*:*:*:*:*:*",
"matchCriteriaId": "4410B9E8-BB15-4A3C-98E2-CF6E259FF74E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_9:*:*:*:*:*:*",
"matchCriteriaId": "68864C91-5D68-46A3-A671-61EBA3D86762",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_93:*:*:*:*:*:*",
"matchCriteriaId": "336F50C0-B258-406F-9C56-A20C1ADF9F36",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_94:*:*:*:*:*:*",
"matchCriteriaId": "5CFFD6BE-1679-4462-A20F-8AF76E3566CD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.10:take_95:*:*:*:*:*:*",
"matchCriteriaId": "FBBBCC15-698D-4B75-8CC6-212870CA29AC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:-:*:*:*:*:*:*",
"matchCriteriaId": "60E5A48C-4ABB-46DB-BA75-132AFB408BC8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_10:*:*:*:*:*:*",
"matchCriteriaId": "BD16B955-141C-4F13-A9BC-6CCCD96248B4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_101:*:*:*:*:*:*",
"matchCriteriaId": "F70DA99D-131C-46CC-B582-CB9419DB1B64",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_103:*:*:*:*:*:*",
"matchCriteriaId": "B06457A0-ED12-4412-BB1D-1D24E0C751EA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_105:*:*:*:*:*:*",
"matchCriteriaId": "FD7D44D8-C2D1-46C4-B9E4-29664BCFEAB4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_111:*:*:*:*:*:*",
"matchCriteriaId": "3A7EF92D-B4CC-4868-9026-8F5DA0D14DFC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_113:*:*:*:*:*:*",
"matchCriteriaId": "4347D905-4E57-4D64-9B57-C406A70DC0C1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_115:*:*:*:*:*:*",
"matchCriteriaId": "12E1E158-790D-40D4-81FF-622307C4524E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_118:*:*:*:*:*:*",
"matchCriteriaId": "01DA6EEA-746F-4EB2-81C5-F7C064519D44",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_119:*:*:*:*:*:*",
"matchCriteriaId": "AD575960-0B66-48F9-BC9D-6F7DAEF0BCBC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_120:*:*:*:*:*:*",
"matchCriteriaId": "776DF4D6-9CC1-4BC2-93D0-9DE2405716EA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_122:*:*:*:*:*:*",
"matchCriteriaId": "C0AABCDA-255E-4096-8DEF-483E0373E7F7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_126:*:*:*:*:*:*",
"matchCriteriaId": "236CB75E-705A-46B3-A531-29E343AA024A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_127:*:*:*:*:*:*",
"matchCriteriaId": "D1A5645A-D22D-4B5B-86FA-29642111FEDF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_14:*:*:*:*:*:*",
"matchCriteriaId": "B90AA06D-C905-4811-A93A-44F787563FB0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_141:*:*:*:*:*:*",
"matchCriteriaId": "8A1BC954-296C-4A94-847D-479825CDA84C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_146:*:*:*:*:*:*",
"matchCriteriaId": "BADA45FE-319D-421F-B4B6-D221D78B69CC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_158:*:*:*:*:*:*",
"matchCriteriaId": "131ADAE9-9514-4C12-BE4D-312EB16F2E24",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_161:*:*:*:*:*:*",
"matchCriteriaId": "9D912106-DC05-42B9-914B-A559ED20CAB6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_166:*:*:*:*:*:*",
"matchCriteriaId": "31D18E59-D406-4263-83B1-F9267667AE1E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_24:*:*:*:*:*:*",
"matchCriteriaId": "CBA6E4FC-BDCC-425F-9D69-E9183548893A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_26:*:*:*:*:*:*",
"matchCriteriaId": "6DF70422-7897-49CC-8874-A96D4CA64E11",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_38:*:*:*:*:*:*",
"matchCriteriaId": "F3240200-0517-43FD-BED2-D8AF844BF6E6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_41:*:*:*:*:*:*",
"matchCriteriaId": "BE6FBF0A-195F-4E52-9FBF-CD9A71EF3A36",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_43:*:*:*:*:*:*",
"matchCriteriaId": "57B969D9-DCC0-4B06-818F-CE2521C4C0C0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_45:*:*:*:*:*:*",
"matchCriteriaId": "CA897E69-E1CE-45A1-A0DB-A7BF444484F3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_53:*:*:*:*:*:*",
"matchCriteriaId": "A13B8B4D-D746-432A-8833-BDF3A5A13CB4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_54:*:*:*:*:*:*",
"matchCriteriaId": "CF0A7585-591D-4FA1-941E-55FB0207C207",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_65:*:*:*:*:*:*",
"matchCriteriaId": "2A5B10FC-D9B5-4BB2-AD82-0B9AFB2AD0DE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_70:*:*:*:*:*:*",
"matchCriteriaId": "ECE1DDA0-9A0A-44D5-919E-24810E7131B0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_76:*:*:*:*:*:*",
"matchCriteriaId": "491F74B1-998F-459A-A27D-EB01597C9B01",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_79:*:*:*:*:*:*",
"matchCriteriaId": "A31115EC-8018-4EF3-B5D0-0F1EA2392680",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_8:*:*:*:*:*:*",
"matchCriteriaId": "E415D02C-B30A-4210-8F14-47ABF46D4E64",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_84:*:*:*:*:*:*",
"matchCriteriaId": "27AED864-AC5B-4FCF-9FD7-6E0D49569BB2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_89:*:*:*:*:*:*",
"matchCriteriaId": "ABF3E632-8D50-4373-9576-0E710511D21B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_90:*:*:*:*:*:*",
"matchCriteriaId": "C6229824-D7A7-439E-9FDD-95F753061410",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_92:*:*:*:*:*:*",
"matchCriteriaId": "B218B25D-7722-435C-AA22-B5411E786277",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_96:*:*:*:*:*:*",
"matchCriteriaId": "7A49ABD5-57B9-4E06-AFFE-8A1269BB16C8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_98:*:*:*:*:*:*",
"matchCriteriaId": "3BFA1E0F-A214-4150-A0BD-44B5424A667E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_99:*:*:*:*:*:*",
"matchCriteriaId": "265683A2-DA16-4CDC-AE9D-CE14BAB28A79",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:-:*:*:*:*:*:*",
"matchCriteriaId": "2D16C37E-3064-4E15-8590-3B3020E4FF7E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_10:*:*:*:*:*:*",
"matchCriteriaId": "C01C66D8-5B48-4255-8246-9301EEA863DA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_103:*:*:*:*:*:*",
"matchCriteriaId": "22A0D74F-5216-40D9-B07C-8789A8E2D328",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_107:*:*:*:*:*:*",
"matchCriteriaId": "F2C763B7-B4BD-4915-A33B-9675DC2A1EA5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_118:*:*:*:*:*:*",
"matchCriteriaId": "1844D63C-499D-4185-B1B5-89FBE609F8FA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_12:*:*:*:*:*:*",
"matchCriteriaId": "EC227225-ECF6-4025-B288-992ADE9B6B4B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_122:*:*:*:*:*:*",
"matchCriteriaId": "C7BF37CC-BE7A-4DDD-B5DA-8216B6FE9D44",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_126:*:*:*:*:*:*",
"matchCriteriaId": "7FD699CE-41C5-4A8D-BE52-35CBF1F16C96",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_14:*:*:*:*:*:*",
"matchCriteriaId": "673F8F1B-E64E-44D1-A793-F2B4ED56DDBD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_18:*:*:*:*:*:*",
"matchCriteriaId": "927823EC-B157-4B5C-A4A3-F9D249C88E2C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_19:*:*:*:*:*:*",
"matchCriteriaId": "0DBDDAA3-3CA1-4490-8D43-C8C5C5188A6E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_25:*:*:*:*:*:*",
"matchCriteriaId": "73AEA72B-8E44-4839-8651-5076EBC609B1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_33:*:*:*:*:*:*",
"matchCriteriaId": "B11AA664-F3C8-44A6-AD11-14AF6AFAD2E2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_34:*:*:*:*:*:*",
"matchCriteriaId": "0D511D85-A534-49A5-A9AE-88BC624311B6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_36:*:*:*:*:*:*",
"matchCriteriaId": "B0A2B178-FC15-4D76-9075-D605F87F350D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_39:*:*:*:*:*:*",
"matchCriteriaId": "1360EBA1-B59B-472E-9019-9EB560A05699",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_41:*:*:*:*:*:*",
"matchCriteriaId": "F1301887-F38A-4FE6-9614-1FCF8FDE681C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_43:*:*:*:*:*:*",
"matchCriteriaId": "74DA6820-BE56-4115-A058-45CFF400DAA6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_44:*:*:*:*:*:*",
"matchCriteriaId": "54ECA176-C752-42C6-A9B2-CF408D8C580E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_60:*:*:*:*:*:*",
"matchCriteriaId": "D2E35CA7-FED1-44E9-B144-1B51A2D7FB8B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_73:*:*:*:*:*:*",
"matchCriteriaId": "DBA345D3-0FE7-4BE9-BEBB-96CD4055E546",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_91:*:*:*:*:*:*",
"matchCriteriaId": "E2D4A292-EE3B-4A3A-9B16-E03626F82832",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:-:*:*:*:*:*:*",
"matchCriteriaId": "9381DBDF-5CE2-454C-BE04-859C9A197C90",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_19:*:*:*:*:*:*",
"matchCriteriaId": "F7442AF7-C511-4A15-AA85-FCB741F6A733",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_24:*:*:*:*:*:*",
"matchCriteriaId": "B9E02250-00AF-4684-A9A0-E9E4032DEA66",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_36:*:*:*:*:*:*",
"matchCriteriaId": "AC444B54-CFE5-4B7C-A885-9DE87394B132",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_40:*:*:*:*:*:*",
"matchCriteriaId": "9B722ECE-8995-4D34-AC3B-3CEAF1FDAA08",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_44:*:*:*:*:*:*",
"matchCriteriaId": "E8D09FD6-5DC3-4C3A-8598-E91F86C5F657",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_6:*:*:*:*:*:*",
"matchCriteriaId": "27057734-9870-4BA0-9A29-DB03FDFE485F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:multi-domain_security_management:r82.20:-:*:*:*:*:*:*",
"matchCriteriaId": "E29151E7-2021-4553-8F70-AAE4AAB10188",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B7EA18CB-4869-48C3-A9BC-0B0A6580FF1A",
"versionEndExcluding": "r81.10",
"versionStartIncluding": "r80",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:-:*:*:*:*:*:*",
"matchCriteriaId": "E3EFE5C0-04CD-4B17-AD14-5035C2969047",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_106:*:*:*:*:*:*",
"matchCriteriaId": "59FBDFE0-B5D7-44B5-B8A4-7ED87D8D1C13",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_107:*:*:*:*:*:*",
"matchCriteriaId": "BB2A0A91-CB75-455E-AA39-A4A79C8B574C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_109:*:*:*:*:*:*",
"matchCriteriaId": "A8EFFC09-DF62-41C5-A719-30CC9D323F96",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_110:*:*:*:*:*:*",
"matchCriteriaId": "C330AA5D-155B-4B29-968F-3A2B95EE7FAC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_113:*:*:*:*:*:*",
"matchCriteriaId": "653CF951-198E-4378-82E6-145052CF388A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_128:*:*:*:*:*:*",
"matchCriteriaId": "8819E6BD-A6E0-4BC5-8BA8-A227266120E6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_129:*:*:*:*:*:*",
"matchCriteriaId": "B5A0A754-1D52-4C50-80F3-CEB12F67E5AB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_130:*:*:*:*:*:*",
"matchCriteriaId": "7444A711-160A-4B65-955A-509C0A169A6D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_131:*:*:*:*:*:*",
"matchCriteriaId": "D11061E3-C47D-4B72-9226-960965DF73F0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_132:*:*:*:*:*:*",
"matchCriteriaId": "4DD733B2-3D1B-4EDF-B6E3-1F04089CDFF5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_135:*:*:*:*:*:*",
"matchCriteriaId": "0FDDB709-B86E-4EF0-BFFF-E866F5AC13BE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_139:*:*:*:*:*:*",
"matchCriteriaId": "3C2F9CF0-6684-4353-A4A1-7D117CF8032D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_14:*:*:*:*:*:*",
"matchCriteriaId": "EE2DD8DD-3060-4029-AE0E-861DE3EF6C3F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_141:*:*:*:*:*:*",
"matchCriteriaId": "F19DC5F4-4F3D-47E9-9EE1-71EC0FDF2D17",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_150:*:*:*:*:*:*",
"matchCriteriaId": "76101CB6-BD1F-4E0D-BB88-9CC7EA3E84C8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_152:*:*:*:*:*:*",
"matchCriteriaId": "A7628981-6822-44C0-82AC-43BE06DEA3E3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_156:*:*:*:*:*:*",
"matchCriteriaId": "BBB95805-9CCC-4220-B4C1-BF5535968998",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_158:*:*:*:*:*:*",
"matchCriteriaId": "7E441395-16C7-4AFD-BCE5-B7CCED66AEC3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_165:*:*:*:*:*:*",
"matchCriteriaId": "93B0F1EF-1EA1-45A3-ABE1-0BA9E29E8820",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_169:*:*:*:*:*:*",
"matchCriteriaId": "41F7E1A6-F1FA-409A-A8BF-40DDB5EB00FF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_170:*:*:*:*:*:*",
"matchCriteriaId": "D3CC56EB-2456-485F-B7DF-B3F25FB99554",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_171:*:*:*:*:*:*",
"matchCriteriaId": "5EEC17E9-CEF9-4FB2-B1D9-43728013D096",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_172:*:*:*:*:*:*",
"matchCriteriaId": "727BE9AD-AF6C-4159-9932-496480C8B436",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_173:*:*:*:*:*:*",
"matchCriteriaId": "A0B43191-7C2E-46EE-825C-05000A7FBFEC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_174:*:*:*:*:*:*",
"matchCriteriaId": "40EBD18C-3A36-43DA-B045-631CC7517F25",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_177:*:*:*:*:*:*",
"matchCriteriaId": "8891CA25-BB20-4A71-90CA-B94422B71EA5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_181:*:*:*:*:*:*",
"matchCriteriaId": "40776587-1731-4579-A8C6-619DB6DDD3F2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_183:*:*:*:*:*:*",
"matchCriteriaId": "268462D2-87BD-4144-9255-163DB1711917",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_187:*:*:*:*:*:*",
"matchCriteriaId": "858E5667-5661-4DC9-9017-498F0C107699",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_190:*:*:*:*:*:*",
"matchCriteriaId": "DD908FC8-7991-41F9-87C1-45DA624B24B5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_22:*:*:*:*:*:*",
"matchCriteriaId": "39876606-2D2B-49FC-9A7F-9A564418EB8C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_30:*:*:*:*:*:*",
"matchCriteriaId": "A3F582E0-A364-4B88-9C06-3796707745FD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_38:*:*:*:*:*:*",
"matchCriteriaId": "8490D7B3-4553-457F-A89C-136911626C70",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_44:*:*:*:*:*:*",
"matchCriteriaId": "59CA7C8E-63D3-48D4-AA6F-DEB270976A5E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_45:*:*:*:*:*:*",
"matchCriteriaId": "D6E1781C-58C6-4336-9354-40166B88B6C5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_55:*:*:*:*:*:*",
"matchCriteriaId": "7A05B5FE-A04D-4A75-A1A6-89BB2A00A0E1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_61:*:*:*:*:*:*",
"matchCriteriaId": "7101AE06-0C27-4A04-A232-10E4327A9C18",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_66:*:*:*:*:*:*",
"matchCriteriaId": "47EE9CF9-65D8-4DB3-82EA-ECC20447B037",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_75:*:*:*:*:*:*",
"matchCriteriaId": "0E784373-CFE7-4598-809F-5C4DBCEF70AA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_78:*:*:*:*:*:*",
"matchCriteriaId": "AEF420B8-0D77-47B1-A19E-9311BD86CA6E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_79:*:*:*:*:*:*",
"matchCriteriaId": "B5B93BB5-16BB-452A-97D5-10C7772F660F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_81:*:*:*:*:*:*",
"matchCriteriaId": "A1F6B14B-40C5-4FEF-BC85-84E4B4361079",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_82:*:*:*:*:*:*",
"matchCriteriaId": "3ECC6338-F541-449F-AD62-9D852F4E7454",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_85:*:*:*:*:*:*",
"matchCriteriaId": "B14FD6AB-A559-49B9-9C97-978647042EAC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_87:*:*:*:*:*:*",
"matchCriteriaId": "D6F74C50-FB32-446F-94FF-F5342D56741A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_9:*:*:*:*:*:*",
"matchCriteriaId": "B531E951-4293-45C1-A779-9B7052704AC8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_93:*:*:*:*:*:*",
"matchCriteriaId": "FCA346D0-0D8E-4FB4-AE11-E0A062A339BD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_94:*:*:*:*:*:*",
"matchCriteriaId": "9F6F7CC6-CC82-40BE-88FE-0A2B43ACA314",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.10:take_95:*:*:*:*:*:*",
"matchCriteriaId": "7C669D64-A6B6-495A-BBC2-62B6947978E0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:-:*:*:*:*:*:*",
"matchCriteriaId": "A8F7304B-C04F-4C5B-9E98-D736C55A0AE2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_10:*:*:*:*:*:*",
"matchCriteriaId": "A897D6EA-56D9-4246-9985-9BCE0B5B575E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_101:*:*:*:*:*:*",
"matchCriteriaId": "A93B1873-08AD-45D4-9F27-D76DEBD445E4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_103:*:*:*:*:*:*",
"matchCriteriaId": "C29DD086-7438-45BD-B1DC-B20D2753A7E2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_105:*:*:*:*:*:*",
"matchCriteriaId": "A7792771-5225-4B15-8B12-94AC5DB158D8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_111:*:*:*:*:*:*",
"matchCriteriaId": "54CF3193-F101-4BD9-952F-47886308799B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_113:*:*:*:*:*:*",
"matchCriteriaId": "F012878A-86CE-4881-94C1-CA39420E2888",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_115:*:*:*:*:*:*",
"matchCriteriaId": "E8A50B35-2459-43C2-840B-D3BC78837C6A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_118:*:*:*:*:*:*",
"matchCriteriaId": "C62D9794-379F-4722-B467-0CFE65A12B80",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_119:*:*:*:*:*:*",
"matchCriteriaId": "D92A32EE-259C-423B-B422-A765EF4426F9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_120:*:*:*:*:*:*",
"matchCriteriaId": "668D309B-DA82-4EC4-9F09-A5772BC17447",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_122:*:*:*:*:*:*",
"matchCriteriaId": "1230C289-7789-471F-9EA3-2FE2DCDA6981",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_126:*:*:*:*:*:*",
"matchCriteriaId": "96187221-D11F-4CFA-83AD-0548A528C320",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_127:*:*:*:*:*:*",
"matchCriteriaId": "AF79E967-AEE7-494E-B8E4-94ABFE8BEFB7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_14:*:*:*:*:*:*",
"matchCriteriaId": "E450F71D-626F-4515-91A2-5F4FCD8FE21D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_141:*:*:*:*:*:*",
"matchCriteriaId": "6E73C0C0-227D-42EA-9E5F-BD9120E94213",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_146:*:*:*:*:*:*",
"matchCriteriaId": "926F2DA0-8168-4EED-BB8E-E9A7BC185970",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_158:*:*:*:*:*:*",
"matchCriteriaId": "5B16C81F-361A-475A-A7EF-417738EC555A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_161:*:*:*:*:*:*",
"matchCriteriaId": "1A14DC8E-32C7-4BA9-A88E-6D03F8473DDD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_166:*:*:*:*:*:*",
"matchCriteriaId": "34C9AF5B-F155-4D9C-B4B4-730696A85873",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_24:*:*:*:*:*:*",
"matchCriteriaId": "273F628E-2889-412C-BC02-82FEEF4CE6AF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_26:*:*:*:*:*:*",
"matchCriteriaId": "40CC00A2-E57F-49B8-BD9A-A3107258EFF9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_38:*:*:*:*:*:*",
"matchCriteriaId": "38C33CF8-3FA4-4775-91CF-83B9A4B51B5D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_41:*:*:*:*:*:*",
"matchCriteriaId": "186C5B76-630C-483E-9C44-27BA00A1365B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_43:*:*:*:*:*:*",
"matchCriteriaId": "965C32C2-BAD2-415A-B8F3-A5B2A96C077F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_45:*:*:*:*:*:*",
"matchCriteriaId": "1D7B7908-F110-4937-A16F-E942F7EE94E8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_53:*:*:*:*:*:*",
"matchCriteriaId": "A7CE4E97-2553-4B54-9B49-2AEFFF1E97DF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_54:*:*:*:*:*:*",
"matchCriteriaId": "C3BB26FE-A7A4-4C0C-82E0-3B690C08AF4D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_65:*:*:*:*:*:*",
"matchCriteriaId": "CC0BAF78-22E6-4F90-885D-654A317832C3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_70:*:*:*:*:*:*",
"matchCriteriaId": "2CEFB387-F28B-4A26-B0BD-A99D88765CF2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_76:*:*:*:*:*:*",
"matchCriteriaId": "05C5D50F-DD77-4B91-9B98-EA79206E3AEC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_79:*:*:*:*:*:*",
"matchCriteriaId": "E7A2F23D-A588-4895-91CB-F4726D244E71",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_8:*:*:*:*:*:*",
"matchCriteriaId": "496C913F-16A4-4710-80EB-0444ED57F981",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_84:*:*:*:*:*:*",
"matchCriteriaId": "F7B7D466-132A-4584-B6D8-68C05F02E3AE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_89:*:*:*:*:*:*",
"matchCriteriaId": "B8DDE050-D1E9-4E42-A511-FE85C5482EAD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_90:*:*:*:*:*:*",
"matchCriteriaId": "2508B0C0-F3F7-4993-A90B-31DBD299C7EB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_92:*:*:*:*:*:*",
"matchCriteriaId": "EB51FD59-0119-4335-851F-65F108E34885",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_96:*:*:*:*:*:*",
"matchCriteriaId": "F26A6EE5-5083-42BE-822A-66BB279B68F6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_98:*:*:*:*:*:*",
"matchCriteriaId": "D3BC31FE-EE44-4919-96F1-A3CD9EB2E6F9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_99:*:*:*:*:*:*",
"matchCriteriaId": "54AF1EBC-02AE-4303-93E9-ACE2C15831B3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:-:*:*:*:*:*:*",
"matchCriteriaId": "9A4DD35F-132E-4CB4-846C-8C0A0DAE11A3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_10:*:*:*:*:*:*",
"matchCriteriaId": "28B96884-0ED3-4B3F-9FF2-D9826C6A11C8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_103:*:*:*:*:*:*",
"matchCriteriaId": "498B5193-9227-408B-BB96-93D47FE6C136",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_107:*:*:*:*:*:*",
"matchCriteriaId": "5F5BF964-A06C-46B4-BBAF-B992F2BFE5BA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_118:*:*:*:*:*:*",
"matchCriteriaId": "D6BC96F7-EA95-4126-AF11-CA51E710B8B5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_12:*:*:*:*:*:*",
"matchCriteriaId": "25CBBD3E-F6BC-44A8-ADF8-A2A683C4FD90",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_122:*:*:*:*:*:*",
"matchCriteriaId": "09AFB3C5-3E13-4079-B732-9994FB108B80",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_126:*:*:*:*:*:*",
"matchCriteriaId": "4BB9DABC-4207-4BE4-80B9-5431BE8924CC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_14:*:*:*:*:*:*",
"matchCriteriaId": "A593B6C5-F968-4C08-9CEC-0D04CBCFCBAE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_18:*:*:*:*:*:*",
"matchCriteriaId": "B08AEDE4-10E7-49B1-A7E3-343C16651E0C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_19:*:*:*:*:*:*",
"matchCriteriaId": "F52CCFD6-8E42-4704-BCDB-8D4743AD8878",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_25:*:*:*:*:*:*",
"matchCriteriaId": "D1A5BD3C-6C81-4948-BD6E-351AE54E051B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_33:*:*:*:*:*:*",
"matchCriteriaId": "92E9C407-AAF6-4FE8-ABF8-28E78090C2F5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_34:*:*:*:*:*:*",
"matchCriteriaId": "17892B1E-CFC8-4A21-A654-0C67AE1CEA02",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_36:*:*:*:*:*:*",
"matchCriteriaId": "782C1482-BF59-4663-A17F-A10247715223",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_39:*:*:*:*:*:*",
"matchCriteriaId": "ECB15DB7-ACF9-4D7E-8BAC-C65634E7C813",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_41:*:*:*:*:*:*",
"matchCriteriaId": "D5E45EF8-9B5E-4AAB-8952-9358AC1625D4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_43:*:*:*:*:*:*",
"matchCriteriaId": "BAA7ADEB-B8BF-41C3-B8F9-44B3F617A8B6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_44:*:*:*:*:*:*",
"matchCriteriaId": "539F141A-9129-418A-8C86-8DF565A0106B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_60:*:*:*:*:*:*",
"matchCriteriaId": "2F1C55C8-9EFD-4B74-A1B9-83E1B8B4B306",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_73:*:*:*:*:*:*",
"matchCriteriaId": "BC2BB169-1FE9-4DD9-95DD-C2875068B976",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82:take_91:*:*:*:*:*:*",
"matchCriteriaId": "7924252E-97BB-4ADE-81CA-4EB974B6FD51",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:-:*:*:*:*:*:*",
"matchCriteriaId": "4005C231-9EA2-40A5-A2F0-5A94EA498E96",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_19:*:*:*:*:*:*",
"matchCriteriaId": "395F93BF-DAC3-4213-AA34-D708570B5B9F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_24:*:*:*:*:*:*",
"matchCriteriaId": "CF84D1C9-E656-4CBF-85DB-3AE434DF87F0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_36:*:*:*:*:*:*",
"matchCriteriaId": "43F8A4D6-ECED-4155-A41C-48B1506D32B4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_40:*:*:*:*:*:*",
"matchCriteriaId": "5ABBDE5D-BD23-45CE-BDA8-3168C53803B4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_44:*:*:*:*:*:*",
"matchCriteriaId": "5D89F1B2-43E0-486D-AEC6-0D1B35C4B8A4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_6:*:*:*:*:*:*",
"matchCriteriaId": "05B0445D-E33E-4F3F-B21C-B6988C8F0BBB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:checkpoint:quantum_security_management:r82.20:-:*:*:*:*:*:*",
"matchCriteriaId": "10FE3305-F601-4757-9080-E7F41B2974AA",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server."
}
],
"id": "CVE-2026-93616",
"lastModified": "2026-09-23T16:38:38.987",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9,
"source": "cve@checkpoint.com",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-93616",
"options": [
{
"exploitation": "active"
},
{
"automatable": "yes"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-22T00:00:00+00:00",
"version": "2.0.3"
}
}
]
},
"published": "2026-09-22T13:17:11.963",
"references": [
{
"source": "cve@checkpoint.com",
"tags": [
"Mitigation",
"Patch",
"Vendor Advisory"
],
"url": "https://support.checkpoint.com/results/sk/sk1000171"
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Vendor Advisory"
],
"url": "https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616/"
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
],
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-93616"
}
],
"sourceIdentifier": "cve@checkpoint.com",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-22"
}
],
"source": "cve@checkpoint.com",
"type": "Secondary"
}
]
}
},
"vulnrichment": {
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-93616",
"options": [
{
"Exploitation": "active"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-22T19:40:12.322904Z",
"version": "2.0.3"
},
"type": "ssvc"
}
},
{
"other": {
"content": {
"dateAdded": "2026-09-22",
"reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-93616"
},
"type": "kev"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-22T15:33:37.996Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616/"
},
{
"tags": [
"government-resource"
],
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-93616"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-09-22T00:00:00.000Z",
"value": "CVE-2026-93616 added to CISA KEV"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Quantum Security Management",
"vendor": "checkpoint",
"versions": [
{
"status": "affected",
"version": "R82.20 with no Jumbo Hotfix"
},
{
"status": "affected",
"version": "R82.10 with Jumbo Hotfix Take 44 or below"
},
{
"status": "affected",
"version": "R82 with Jumbo Hotfix Take 126 or below"
},
{
"status": "affected",
"version": "R81.20 with Jumbo Hotfix Take 166 or below"
},
{
"status": "affected",
"version": "R81.10 (EOS) with Jumbo Hotfix Take 190 or below"
},
{
"status": "affected",
"version": "R81 (EOS)"
},
{
"status": "affected",
"version": "R80.40 (EOS)"
},
{
"status": "affected",
"version": "R80.30 (EOS)"
},
{
"status": "affected",
"version": "R80.20 (EOS)"
},
{
"status": "affected",
"version": "R80.10 (EOS)"
},
{
"status": "affected",
"version": "R80 (EOS)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027).",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-22T12:59:01.057Z",
"orgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
"shortName": "checkpoint"
},
"references": [
{
"url": "https://support.checkpoint.com/results/sk/sk1000171"
}
],
"title": "Directory Traversal and File upload allows execution of arbitrary script on the Management Server",
"x_generator": {
"engine": "cvelib 1.8.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
"assignerShortName": "checkpoint",
"cveId": "CVE-2026-93616",
"datePublished": "2026-09-22T12:59:01.057Z",
"dateReserved": "2026-09-18T11:08:38.818Z",
"dateUpdated": "2026-09-22T19:58:24.103Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.