Check Point Multiple Products Path Traversal Vulnerability

A critical path traversal vulnerability has been identified in multiple Check Point products including Security Management Server, Multi-Domain Security Management Server, Log Server, Multi-Domain Log Server, and SmartEvent. The vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on affected systems. This represents a significant risk as no authentication is required to exploit the flaw. The vulnerability is tracked as CVE-2026-93616 and has been listed by CISA, indicating active concern at a federal level. It is also referenced under CISA's BOD 26-04 directive, which prioritizes security updates based on risk. Organizations using affected Check Point products are urged to apply patches immediately and conduct forensic triage as outlined in the BOD 26-04 implementation guidance.