https://vulnerability.circl.lu/sightings/feed 2026-09-23T02:40:44.664638+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/d7b32445-7bf1-498c-beb8-eaf2943f9add/export 2026-09-23T02:40:44.681993+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d7b32445-7bf1-498c-beb8-eaf2943f9add", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://thehackernews.com/2026/09/check-point-warns-of-management-server.html", "content": "Attackers exploited a previously unknown flaw in Check Point's Security Management Server in a handful of targeted attacks on July 23, the company said.\n\nThe flaw, CVE-2026-93616, allows an attacker who can access the server's web service to run scripts on it without logging in. Check Point released a fix on September 22 for the server that controls firewall policies for the Check Point", "creation_timestamp": "2026-09-23T01:00:45.030854Z"} 2026-09-23T01:00:45.030854+00:00 https://vulnerability.circl.lu/sighting/1bc29bc4-05be-4f3d-92fb-1ede33c9b7fb/export 2026-09-23T02:40:44.683331+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1bc29bc4-05be-4f3d-92fb-1ede33c9b7fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://www.acn.gov.it/portale/w/checkpoint-rilevato-sfruttamento-in-rete-della-cve-2026-93616", "content": "Rilevato lo sfruttamento in rete di una vulnerabilit\u00e0, identificata tramite la CVE-2026-93616, presente in Check Point Management Server. La vulnerabilit\u00e0 potrebbe consentire a utenti malintenzionati remoti di eseguire codice arbitrario sui sistemi interessati.", "creation_timestamp": "2026-09-23T01:00:44.618454Z"} 2026-09-23T01:00:44.618454+00:00 https://vulnerability.circl.lu/sighting/95283d38-7b97-41c5-b98d-67621f1d218e/export 2026-09-23T02:40:44.683417+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "95283d38-7b97-41c5-b98d-67621f1d218e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mw5jbrvskcao", "content": "Check Point $CHKP reports exploitation of CVE-2026-85102 and CVE-2026-93616. Canada's Cyber Centre says both entered CISA's exploited-vulnerabilities catalog on September 22. AI-generated illustrative visuals.", "creation_timestamp": "2026-09-23T00:48:35.031369Z"} 2026-09-23T00:48:35.031369+00:00 https://vulnerability.circl.lu/sighting/0b1d4009-48a1-4371-af84-253ca612c3e8/export 2026-09-23T02:40:44.683483+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0b1d4009-48a1-4371-af84-253ca612c3e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mw5ddm77ip2c", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-93616: Check Point Multiple Products Path Traversal Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-93616", "creation_timestamp": "2026-09-22T22:59:55.206555Z"} 2026-09-22T22:59:55.206555+00:00 https://vulnerability.circl.lu/sighting/2e4854f6-e409-4c96-9089-83944e5ce9ed/export 2026-09-23T02:40:44.683547+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2e4854f6-e409-4c96-9089-83944e5ce9ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://thehackernews.com/2026/09/check-point-warns-of-management-server.html", "content": "Attackers exploited a previously unknown flaw in Check Point's Security Management Server in a handful of targeted attacks on July 23, the company said.\n\nThe flaw, CVE-2026-93616, allows an attacker who can access the server's web service to run scripts on it without logging in. Check Point released a fix on September 22 for the server that controls firewall policies for the Check Point", "creation_timestamp": "2026-09-22T22:00:40.815629Z"} 2026-09-22T22:00:40.815629+00:00 https://vulnerability.circl.lu/sighting/9bf5f44d-2c9b-43a2-ac8a-2c9a9ed8b777/export 2026-09-23T02:40:44.683619+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "9bf5f44d-2c9b-43a2-ac8a-2c9a9ed8b777", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/117316775403622589", "content": "\u203c\ufe0f Check Point is warning customers about a newly disclosed Security Management Server zero-day exploited in targeted attacks in July.\nCVE-2026-93616 lets an attacker who can reach the web service upload and run scripts without logging in. A fix landed Sept. 22.\nHere's what admins should hunt for: https://thehackernews.com/2026/09/check-point-warns-of-management-server.html", "creation_timestamp": "2026-09-22T21:18:49.732618Z"} 2026-09-22T21:18:49.732618+00:00 https://vulnerability.circl.lu/sighting/08e61cfb-66fa-4f31-8412-375e58ec024c/export 2026-09-23T02:40:44.683679+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "08e61cfb-66fa-4f31-8412-375e58ec024c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mw557veelt2x", "content": "Check Point Patches Zero-Day CVE-2026-93616 in Management Server: CVSS 9.8", "creation_timestamp": "2026-09-22T21:10:27.557291Z"} 2026-09-22T21:10:27.557291+00:00 https://vulnerability.circl.lu/sighting/4f12f2dc-6d9a-42de-b05a-ddb6b6b61762/export 2026-09-23T02:40:44.683741+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4f12f2dc-6d9a-42de-b05a-ddb6b6b61762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mw54nyelcd24", "content": "Check Point disclosed CVE-2026-93616, a path traversal zero-day in Security Management Server web services used in targeted attacks, and released fixes plus hunting guidance. #CheckPoint #ZeroDay #VPN", "creation_timestamp": "2026-09-22T21:00:27.507323Z"} 2026-09-22T21:00:27.507323+00:00 https://vulnerability.circl.lu/sighting/2669f4aa-547a-497f-ad57-1448288a9598/export 2026-09-23T02:40:44.683799+00:00 Joseph Lee https://vulnerability.circl.lu/user/syspect {"uuid": "2669f4aa-547a-497f-ad57-1448288a9598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-29", "content": "", "creation_timestamp": "2026-09-22T20:45:02.033732Z"} 2026-09-22T20:45:02.033732+00:00 https://vulnerability.circl.lu/sighting/56e5b735-ed32-4cc0-bcd5-ee772cc8db0f/export 2026-09-23T02:40:44.684520+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "56e5b735-ed32-4cc0-bcd5-ee772cc8db0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93616", "type": "seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mw4zn3mv562e", "content": "Check Point Management Server zero-day: 61 days from exploit to fix.\nCVE-2026-93616. Your management plane sets policy for every gateway it touches.\n#ThreatIntel #ICS #CyberSecurity\nhttps://threat-intelligence.redeyesecurity.com/blog/check-point-management-server-zero-day-cve-2026-93616", "creation_timestamp": "2026-09-22T20:06:16.113544Z"} 2026-09-22T20:06:16.113544+00:00