PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

One Port to Root: Weaponizing Check Point Management CVE-2026-93616

bishopfox.com | vulnerability | CVE-2026-93616 | #rce | #exploitation | #firewall | #bishopfox | #check-point | #cve-2026-936
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

CVE-2026-93616 is an unauthenticated root RCE on Check Point management servers exploited in the wild. Bishop Fox confirmed the chain end to end.
CVE
CVE-2026-93616
Published
Collected

Related coverage

vulnerability · bishopfox.com
Submit and Execute: Weaponizing Reflected XSS in Siemens Teamcenter's Login Redirect (CVE-2026-58113)
CVE-2026-58113 is a zero-interaction XSS in Siemens Teamcenter’s login redirect that let Bishop Fox silently reassign workflow delegation on a victim’s…
vulnerability · vercel.com
Our $1 million hacker challenge for React2Shell
We paid $1M to security researchers to break our WAF. Here's what we learned defending against React2Shell.
research · lab.ctbb.show
Write Path Traversal to a RCE Art Department
# Write Path Traversal to a RCE Art Department ~/authors/fsi - profile fsi * * * Diyan Apostolov Nov 28, 2025 CriticalThinking Research members are treated as artists thus here is my small and...
Critical · vulnerability · aikido.dev
Node2Shell Evolves to HTTP2Shell: Google Brotli Flaw (CVE-2026-111497) Affects HTTP Ecosystem
Brotli is ubiquitous across the modern HTTP ecosystem for web asset compression. Because the flaw allows unauthenticated remote code execution in both directions, any service or client automatically decompressing untrusted Brotli payloads is at critical risk until patched.
vulnerability · aikido.dev
Node2Shell: Node.js Brotli vulnerability allows remote code execution (CVE-2026-111497)
Node.js shipped a security update on Wednesday for a flaw in how it decompresses Brotli data, a bug people are already calling Node2Shell (CVE-2026-111497). If an attacker can get a malicious payload in front of your app, the flaw can crash the process, leak part of its memory, or potentially let them run their own code.
vulnerability · pwn.ai
CVE-2026-106378: Chrome GPU Sandbox Escape to RCE
How an allowed WindowServer connection and inherited macOS event-posting permission let Chrome’s sandboxed GPU process inject keystrokes and launch apps outside the sandbox.
Back