Free practical cybersecurity guidance for organisations without a security team.
hello@actionsoncyber.com
Actions On Cyber logo
Contact
← Back to Vulnerability Briefs

Critical Security Flaw in Check Point Management Servers

A serious security weakness has been found in Check Point’s management software that could let attackers take control of your firewall system. This is important because it’s actively being exploited and could allow unauthorised access to your network controls.

23 September 2026

Reference: CVE-2026-93616

1. What is being reported?

The vulnerability allows someone without any login details to upload and run harmful scripts on Check Point Management Servers. This means attackers can potentially control the system that manages your firewall and security settings.

2. What this means in plain English

If your organisation uses Check Point management products, this flaw could let hackers bypass security controls, putting your network and data at risk. It’s like leaving the front door unlocked for criminals to enter and cause damage.

3. Could this affect a small business?

Small businesses using Check Point management products, especially those connected to the internet, could be affected. If you don’t use these products or your IT provider manages your firewall differently, you are likely not impacted.

4. What to do now

  • Contact your IT provider immediately to check if you use Check Point management products.
  • Ensure any recommended security updates or mitigations from Check Point are applied without delay.
  • Review your firewall’s internet exposure and limit access where possible.
  • If updates or fixes are not available, discuss with your IT provider whether to stop using the affected product.

5. Ask your IT provider

Can you confirm if our systems use Check Point Management Servers and what steps are being taken to protect us from the recently reported critical vulnerability CVE-2026-93616?

6. Bottom line

Act quickly to check and secure any Check Point management systems to prevent attackers from gaining control.

Information based on CISA KEV, NVD and reputable security news reports.

Back to Vulnerability Briefs