Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks

The box guarding your perimeter is also an internet-facing web service. Check Point patched CVE-2026-93616 this week - CVSS 9.8, path traversal in Security Management Server, lets an unauthenticated attacker upload scripts and run them. It was already used in targeted attacks on 23 July, so that’s two months of dwell time before a fix existed. Check your Jumbo Hotfix take, then actually run the IOC hunt in sk1000171.