Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks

AI Summary

Check Point confirmed active exploitation of CVE-2026-93616, a pre-authentication zero-day in its Security Management Server that allows attackers with web service access to execute arbitrary scripts without credentials. Targeted attacks were recorded as early as July 23, with a patch released September 22. Organizations running Check Point Security Management Server should apply the fix immediately given the unauthenticated code execution risk.

Read full article → https://thehackernews.com/2026/09/check-point-warn…

Relevance score: 88.0/100

# More from September 24

1
F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers The Hacker News
2
ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants The Hacker News
4
Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware The Hacker News
5
Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises The Hacker News
6
MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key The Hacker News
7
Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape The Hacker News
8
Malicious AI agents steal 600K credit cards, infect 100+ sites with skimmers BleepingComputer
9
Check Point warns of hackers exploiting Security Gateway VPN RCE flaw BleepingComputer
10
Arista patches actively exploited VeloCloud Orchestrator zero-day BleepingComputer