Check Point Product Security Update Advisory (CVE-2026-93616)

Overview

A security update has been released to address a vulnerability in Check Point products. The vulnerability is identified as CVE-2026-93616.

Affected Products

• Security Management Server.
• Multi-Domain Security Management Server.
• Log Server.
• Multi-Domain Log Server.
• SmartEvent.

Supported versions are R80, R80.10, R80.20, R80.30, R80.40, R81, R81.10, R81.20, R82, R82.10, And R82.20.

Vulnerability Details

CVE-2026-93616 is a vulnerability in the Check Point Security Management Server, Multi-Domain Security Management Server, Log Server, Multi-Domain Log Server, and SmartEvent. It allows for the execution of arbitrary scripts before authentication through directory traversal (an attack that bypasses the specified Path to access files in other locations) and file upload (the functionality to upload files to the server).

Mitigation Measures

A Vulnerability Patch has been released via the latest update. You must update to the latest version of the Vulnerability Patch as instructed on the reference website.

Required Patch Levels

• Check Point R81.10: Jumbo Hotfix Accumulator Take 192 or higher.
• Check Point R81.20: Jumbo Hotfix Accumulator Take 170 or higher.
• Check Point R82: Jumbo Hotfix Accumulator Take 127 or higher.
• Check Point R81.10: Jumbo Hotfix Accumulator Take 45 or higher.
• Check Point R82.20: Apply the R82.20 Security Hotfix.