Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks

Check Point's Security Management Server was exploited in targeted attacks on July 23 due to a previously unknown flaw. The vulnerability allows attackers to run scripts on the server without logging in, provided they have access to the server's web service. The flaw is identified as CVE-2026-93616. Check Point released a fix for the issue on September 22, which affects the server responsible for controlling firewall policies. The attacks were limited to a handful of targeted incidents. A patch is now available to address the vulnerability.