<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 23 Sep 2026 02:40:46 +0000</lastBuildDate>
    <item>
      <title>d7b32445-7bf1-498c-beb8-eaf2943f9add</title>
      <link>https://vulnerability.circl.lu/sighting/d7b32445-7bf1-498c-beb8-eaf2943f9add/export</link>
      <description>{"uuid": "d7b32445-7bf1-498c-beb8-eaf2943f9add", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://thehackernews.com/2026/09/check-point-warns-of-management-server.html", "content": "Attackers exploited a previously unknown flaw in Check Point's Security Management Server in a handful of targeted attacks on July 23,&amp;nbsp;the company said.\n\nThe flaw, CVE-2026-93616, allows an attacker who can access the server's web service to run scripts on it without logging in. Check Point released a fix on September 22 for the server that controls firewall policies for the Check Point", "creation_timestamp": "2026-09-23T01:00:45.030854Z"}</description>
      <content:encoded>{"uuid": "d7b32445-7bf1-498c-beb8-eaf2943f9add", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://thehackernews.com/2026/09/check-point-warns-of-management-server.html", "content": "Attackers exploited a previously unknown flaw in Check Point's Security Management Server in a handful of targeted attacks on July 23,&amp;nbsp;the company said.\n\nThe flaw, CVE-2026-93616, allows an attacker who can access the server's web service to run scripts on it without logging in. Check Point released a fix on September 22 for the server that controls firewall policies for the Check Point", "creation_timestamp": "2026-09-23T01:00:45.030854Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d7b32445-7bf1-498c-beb8-eaf2943f9add/export</guid>
      <pubDate>Wed, 23 Sep 2026 01:00:45 +0000</pubDate>
    </item>
    <item>
      <title>1bc29bc4-05be-4f3d-92fb-1ede33c9b7fb</title>
      <link>https://vulnerability.circl.lu/sighting/1bc29bc4-05be-4f3d-92fb-1ede33c9b7fb/export</link>
      <description>{"uuid": "1bc29bc4-05be-4f3d-92fb-1ede33c9b7fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://www.acn.gov.it/portale/w/checkpoint-rilevato-sfruttamento-in-rete-della-cve-2026-93616", "content": "Rilevato lo sfruttamento in rete di una vulnerabilit\u00e0, identificata tramite la CVE-2026-93616, presente in Check Point Management Server. La vulnerabilit\u00e0 potrebbe consentire a utenti malintenzionati remoti di eseguire codice arbitrario sui sistemi interessati.", "creation_timestamp": "2026-09-23T01:00:44.618454Z"}</description>
      <content:encoded>{"uuid": "1bc29bc4-05be-4f3d-92fb-1ede33c9b7fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://www.acn.gov.it/portale/w/checkpoint-rilevato-sfruttamento-in-rete-della-cve-2026-93616", "content": "Rilevato lo sfruttamento in rete di una vulnerabilit\u00e0, identificata tramite la CVE-2026-93616, presente in Check Point Management Server. La vulnerabilit\u00e0 potrebbe consentire a utenti malintenzionati remoti di eseguire codice arbitrario sui sistemi interessati.", "creation_timestamp": "2026-09-23T01:00:44.618454Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1bc29bc4-05be-4f3d-92fb-1ede33c9b7fb/export</guid>
      <pubDate>Wed, 23 Sep 2026 01:00:44 +0000</pubDate>
    </item>
    <item>
      <title>95283d38-7b97-41c5-b98d-67621f1d218e</title>
      <link>https://vulnerability.circl.lu/sighting/95283d38-7b97-41c5-b98d-67621f1d218e/export</link>
      <description>{"uuid": "95283d38-7b97-41c5-b98d-67621f1d218e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mw5jbrvskcao", "content": "Check Point $CHKP reports exploitation of CVE-2026-85102 and CVE-2026-93616. Canada's Cyber Centre says both entered CISA's exploited-vulnerabilities catalog on September 22. AI-generated illustrative visuals.", "creation_timestamp": "2026-09-23T00:48:35.031369Z"}</description>
      <content:encoded>{"uuid": "95283d38-7b97-41c5-b98d-67621f1d218e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mw5jbrvskcao", "content": "Check Point $CHKP reports exploitation of CVE-2026-85102 and CVE-2026-93616. Canada's Cyber Centre says both entered CISA's exploited-vulnerabilities catalog on September 22. AI-generated illustrative visuals.", "creation_timestamp": "2026-09-23T00:48:35.031369Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/95283d38-7b97-41c5-b98d-67621f1d218e/export</guid>
      <pubDate>Wed, 23 Sep 2026 00:48:35 +0000</pubDate>
    </item>
    <item>
      <title>0b1d4009-48a1-4371-af84-253ca612c3e8</title>
      <link>https://vulnerability.circl.lu/sighting/0b1d4009-48a1-4371-af84-253ca612c3e8/export</link>
      <description>{"uuid": "0b1d4009-48a1-4371-af84-253ca612c3e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mw5ddm77ip2c", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-93616: Check Point Multiple Products Path Traversal Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-93616", "creation_timestamp": "2026-09-22T22:59:55.206555Z"}</description>
      <content:encoded>{"uuid": "0b1d4009-48a1-4371-af84-253ca612c3e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mw5ddm77ip2c", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-93616: Check Point Multiple Products Path Traversal Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-93616", "creation_timestamp": "2026-09-22T22:59:55.206555Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0b1d4009-48a1-4371-af84-253ca612c3e8/export</guid>
      <pubDate>Tue, 22 Sep 2026 22:59:55 +0000</pubDate>
    </item>
    <item>
      <title>2e4854f6-e409-4c96-9089-83944e5ce9ed</title>
      <link>https://vulnerability.circl.lu/sighting/2e4854f6-e409-4c96-9089-83944e5ce9ed/export</link>
      <description>{"uuid": "2e4854f6-e409-4c96-9089-83944e5ce9ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://thehackernews.com/2026/09/check-point-warns-of-management-server.html", "content": "Attackers exploited a previously unknown flaw in Check Point's Security Management Server in a handful of targeted attacks on July 23,&amp;nbsp;the company said.\n\nThe flaw, CVE-2026-93616, allows an attacker who can access the server's web service to run scripts on it without logging in. Check Point released a fix on September 22 for the server that controls firewall policies for the Check Point", "creation_timestamp": "2026-09-22T22:00:40.815629Z"}</description>
      <content:encoded>{"uuid": "2e4854f6-e409-4c96-9089-83944e5ce9ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://thehackernews.com/2026/09/check-point-warns-of-management-server.html", "content": "Attackers exploited a previously unknown flaw in Check Point's Security Management Server in a handful of targeted attacks on July 23,&amp;nbsp;the company said.\n\nThe flaw, CVE-2026-93616, allows an attacker who can access the server's web service to run scripts on it without logging in. Check Point released a fix on September 22 for the server that controls firewall policies for the Check Point", "creation_timestamp": "2026-09-22T22:00:40.815629Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2e4854f6-e409-4c96-9089-83944e5ce9ed/export</guid>
      <pubDate>Tue, 22 Sep 2026 22:00:40 +0000</pubDate>
    </item>
    <item>
      <title>9bf5f44d-2c9b-43a2-ac8a-2c9a9ed8b777</title>
      <link>https://vulnerability.circl.lu/sighting/9bf5f44d-2c9b-43a2-ac8a-2c9a9ed8b777/export</link>
      <description>{"uuid": "9bf5f44d-2c9b-43a2-ac8a-2c9a9ed8b777", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/117316775403622589", "content": "\u203c\ufe0f Check Point is warning customers about a newly disclosed Security Management Server zero-day exploited in targeted attacks in July.\nCVE-2026-93616 lets an attacker who can reach the web service upload and run scripts without logging in. A fix landed Sept. 22.\nHere's what admins should hunt for: https://thehackernews.com/2026/09/check-point-warns-of-management-server.html", "creation_timestamp": "2026-09-22T21:18:49.732618Z"}</description>
      <content:encoded>{"uuid": "9bf5f44d-2c9b-43a2-ac8a-2c9a9ed8b777", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/117316775403622589", "content": "\u203c\ufe0f Check Point is warning customers about a newly disclosed Security Management Server zero-day exploited in targeted attacks in July.\nCVE-2026-93616 lets an attacker who can reach the web service upload and run scripts without logging in. A fix landed Sept. 22.\nHere's what admins should hunt for: https://thehackernews.com/2026/09/check-point-warns-of-management-server.html", "creation_timestamp": "2026-09-22T21:18:49.732618Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9bf5f44d-2c9b-43a2-ac8a-2c9a9ed8b777/export</guid>
      <pubDate>Tue, 22 Sep 2026 21:18:49 +0000</pubDate>
    </item>
    <item>
      <title>08e61cfb-66fa-4f31-8412-375e58ec024c</title>
      <link>https://vulnerability.circl.lu/sighting/08e61cfb-66fa-4f31-8412-375e58ec024c/export</link>
      <description>{"uuid": "08e61cfb-66fa-4f31-8412-375e58ec024c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mw557veelt2x", "content": "Check Point Patches Zero-Day CVE-2026-93616 in Management Server: CVSS 9.8", "creation_timestamp": "2026-09-22T21:10:27.557291Z"}</description>
      <content:encoded>{"uuid": "08e61cfb-66fa-4f31-8412-375e58ec024c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mw557veelt2x", "content": "Check Point Patches Zero-Day CVE-2026-93616 in Management Server: CVSS 9.8", "creation_timestamp": "2026-09-22T21:10:27.557291Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/08e61cfb-66fa-4f31-8412-375e58ec024c/export</guid>
      <pubDate>Tue, 22 Sep 2026 21:10:27 +0000</pubDate>
    </item>
    <item>
      <title>4f12f2dc-6d9a-42de-b05a-ddb6b6b61762</title>
      <link>https://vulnerability.circl.lu/sighting/4f12f2dc-6d9a-42de-b05a-ddb6b6b61762/export</link>
      <description>{"uuid": "4f12f2dc-6d9a-42de-b05a-ddb6b6b61762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mw54nyelcd24", "content": "Check Point disclosed CVE-2026-93616, a path traversal zero-day in Security Management Server web services used in targeted attacks, and released fixes plus hunting guidance. #CheckPoint #ZeroDay #VPN", "creation_timestamp": "2026-09-22T21:00:27.507323Z"}</description>
      <content:encoded>{"uuid": "4f12f2dc-6d9a-42de-b05a-ddb6b6b61762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mw54nyelcd24", "content": "Check Point disclosed CVE-2026-93616, a path traversal zero-day in Security Management Server web services used in targeted attacks, and released fixes plus hunting guidance. #CheckPoint #ZeroDay #VPN", "creation_timestamp": "2026-09-22T21:00:27.507323Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4f12f2dc-6d9a-42de-b05a-ddb6b6b61762/export</guid>
      <pubDate>Tue, 22 Sep 2026 21:00:27 +0000</pubDate>
    </item>
    <item>
      <title>2669f4aa-547a-497f-ad57-1448288a9598</title>
      <link>https://vulnerability.circl.lu/sighting/2669f4aa-547a-497f-ad57-1448288a9598/export</link>
      <description>{"uuid": "2669f4aa-547a-497f-ad57-1448288a9598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-29", "content": "", "creation_timestamp": "2026-09-22T20:45:02.033732Z"}</description>
      <content:encoded>{"uuid": "2669f4aa-547a-497f-ad57-1448288a9598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-93616", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-29", "content": "", "creation_timestamp": "2026-09-22T20:45:02.033732Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2669f4aa-547a-497f-ad57-1448288a9598/export</guid>
      <pubDate>Tue, 22 Sep 2026 20:45:02 +0000</pubDate>
    </item>
    <item>
      <title>56e5b735-ed32-4cc0-bcd5-ee772cc8db0f</title>
      <link>https://vulnerability.circl.lu/sighting/56e5b735-ed32-4cc0-bcd5-ee772cc8db0f/export</link>
      <description>{"uuid": "56e5b735-ed32-4cc0-bcd5-ee772cc8db0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93616", "type": "seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mw4zn3mv562e", "content": "Check Point Management Server zero-day: 61 days from exploit to fix.\nCVE-2026-93616. Your management plane sets policy for every gateway it touches.\n#ThreatIntel #ICS #CyberSecurity\nhttps://threat-intelligence.redeyesecurity.com/blog/check-point-management-server-zero-day-cve-2026-93616", "creation_timestamp": "2026-09-22T20:06:16.113544Z"}</description>
      <content:encoded>{"uuid": "56e5b735-ed32-4cc0-bcd5-ee772cc8db0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93616", "type": "seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mw4zn3mv562e", "content": "Check Point Management Server zero-day: 61 days from exploit to fix.\nCVE-2026-93616. Your management plane sets policy for every gateway it touches.\n#ThreatIntel #ICS #CyberSecurity\nhttps://threat-intelligence.redeyesecurity.com/blog/check-point-management-server-zero-day-cve-2026-93616", "creation_timestamp": "2026-09-22T20:06:16.113544Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/56e5b735-ed32-4cc0-bcd5-ee772cc8db0f/export</guid>
      <pubDate>Tue, 22 Sep 2026 20:06:16 +0000</pubDate>
    </item>
  </channel>
</rss>
