Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks

Attackers exploited a previously unknown flaw in Check Point’s Security Management Server in a handful of targeted attacks on July 23, the company said.

The flaw, tracked as CVE-2026-93616, allows an attacker who can access the server’s web service to run scripts on it without logging in.

Check Point released a fix on September 22 for the server that controls firewall policies for the Check Point.