Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks

Attackers exploited a previously unknown flaw in Check Point's Security Management Server in targeted attacks on July 23, the company said. The flaw, CVE-2026-93616, allows an attacker with access to the server's web service to run scripts without logging in. Check Point released a fix on September 22 for the server that controls firewall policies.