Check Point Multi-Domain Security Management vulnerabilities

3 CVEs affecting Check Point Multi-Domain Security Management, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-93616, published 2026-09-22.

More from Check Point.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-16232: Check Point SmartConsole Improper Authentication Vulnerability, published 2026-07-22. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2026-07-22. EPSS: 78% chance of exploitation in the next 30 days. An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with…
• CVE-2026-93616: Check Point Multiple Products Path Traversal Vulnerability, published 2026-09-22. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2026-09-22. EPSS: 75.9% chance of exploitation in the next 30 days. A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.
• CVE-2026-62144, published 2026-07-22. Critical severity, CVSS 9.1. EPSS: 1% chance of exploitation in the next 30 days. An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the…