CVE-2026-93616

checkpoint multi-domain security management

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2026-93616

Katalog CVE

CVSS 9.8 · Critical KEV · sudah dieksploitasi EPSS 19,7%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada checkpoint multi-domain security management. Skor CVSS 3.1 9.8 (Critical) menurut checkpoint.com. Masuk katalog KEV CISA pada 22 September 2026, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.

Advisory KUTIM-CSIRT

Rincian

Terbit di NVD
22 September 2026
Terakhir diubah
23 September 2026
Status NVD
Analyzed
CVSS 3.1
9.8 (Critical), sumber checkpoint.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
EPSS (30 hari)
19,7% peluang dieksploitasi; lebih tinggi dari 97,3% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama
Check Point Multiple Products Path Traversal Vulnerability
Masuk KEV
22 September 2026
Tenggat CISA
25 September 2026 (untuk instansi federal AS)
Ransomware
Belum tercatat
Tindakan wajib
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Produk dan versi terdampak

VendorProdukVersi terdampak
checkpoint multi-domain security management Versi r80 hingga sebelum r81.10
checkpoint multi-domain security management Versi r81.10
checkpoint multi-domain security management Versi r81.10 take_106
checkpoint multi-domain security management Versi r81.10 take_107
checkpoint multi-domain security management Versi r81.10 take_109
checkpoint multi-domain security management Versi r81.10 take_110
checkpoint multi-domain security management Versi r81.10 take_113
checkpoint multi-domain security management Versi r81.10 take_128
checkpoint multi-domain security management Versi r81.10 take_129
checkpoint multi-domain security management Versi r81.10 take_130
checkpoint multi-domain security management Versi r81.10 take_131
checkpoint multi-domain security management Versi r81.10 take_132
checkpoint multi-domain security management Versi r81.10 take_135
checkpoint multi-domain security management Versi r81.10 take_139
checkpoint multi-domain security management Versi r81.10 take_14
checkpoint multi-domain security management Versi r81.10 take_141
checkpoint multi-domain security management Versi r81.10 take_150
checkpoint multi-domain security management Versi r81.10 take_152
checkpoint multi-domain security management Versi r81.10 take_156
checkpoint multi-domain security management Versi r81.10 take_158
checkpoint multi-domain security management Versi r81.10 take_165
checkpoint multi-domain security management Versi r81.10 take_169
checkpoint multi-domain security management Versi r81.10 take_170
checkpoint multi-domain security management Versi r81.10 take_171
checkpoint multi-domain security management Versi r81.10 take_172
checkpoint multi-domain security management Versi r81.10 take_173
checkpoint multi-domain security management Versi r81.10 take_174
checkpoint multi-domain security management Versi r81.10 take_177
checkpoint multi-domain security management Versi r81.10 take_181
checkpoint multi-domain security management Versi r81.10 take_183
checkpoint multi-domain security management Versi r81.10 take_187
checkpoint multi-domain security management Versi r81.10 take_190
checkpoint multi-domain security management Versi r81.10 take_22
checkpoint multi-domain security management Versi r81.10 take_30
checkpoint multi-domain security management Versi r81.10 take_38
checkpoint multi-domain security management Versi r81.10 take_44
checkpoint multi-domain security management Versi r81.10 take_45
checkpoint multi-domain security management Versi r81.10 take_55
checkpoint multi-domain security management Versi r81.10 take_61
checkpoint multi-domain security management Versi r81.10 take_66
checkpoint multi-domain security management Versi r81.10 take_75
checkpoint multi-domain security management Versi r81.10 take_78
checkpoint multi-domain security management Versi r81.10 take_79
checkpoint multi-domain security management Versi r81.10 take_81
checkpoint multi-domain security management Versi r81.10 take_82
checkpoint multi-domain security management Versi r81.10 take_85
checkpoint multi-domain security management Versi r81.10 take_87
checkpoint multi-domain security management Versi r81.10 take_9
checkpoint multi-domain security management Versi r81.10 take_93
checkpoint multi-domain security management Versi r81.10 take_94
checkpoint multi-domain security management Versi r81.10 take_95
checkpoint multi-domain security management Versi r81.20
checkpoint multi-domain security management Versi r81.20 take_10
checkpoint multi-domain security management Versi r81.20 take_101
checkpoint multi-domain security management Versi r81.20 take_103
checkpoint multi-domain security management Versi r81.20 take_105
checkpoint multi-domain security management Versi r81.20 take_111
checkpoint multi-domain security management Versi r81.20 take_113
checkpoint multi-domain security management Versi r81.20 take_115
checkpoint multi-domain security management Versi r81.20 take_118

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 242 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · KEV CISA · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.