Check Point warns of Management Server zero-day exploited in attacks

By Sergiu Gatlan

AI Summary

Check Point released emergency hotfixes for CVE-2026-93616, a critical zero-day in its Security Management Server that allows unauthenticated remote script execution via the server's web service. Targeted attacks were observed on July 23, with the patch released September 22. Security teams running Check Point firewall management infrastructure should apply the fix immediately given the unauthenticated exploitation vector.

Read full article → https://www.bleepingcomputer.com/news/security/che…

Relevance score: 90.0/100

# More from September 23

1
ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach BleepingComputer
2
EvilTokens PhaaS disrupted after compromising 12,000 Microsoft accounts BleepingComputer
4
WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers The Hacker News
5
Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access The Hacker News
6
New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory The Hacker News
7
New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups The Hacker News
8
Google Fined €403 Million Over GDPR Violations Tied to Location Data The Hacker News
9
Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer SecurityWeek
10
Japan Dismantles First North Korean Laptop Farm as US and Allies Detail Wider Scheme SecurityWeek