Check Point and WordPress Zero-Days Under Active Exploitation

The Daily CVE Update · Sep 23, 2026 · 12m

Check Point and WordPress Zero-Days Under Active Exploitation

On 22 September 2026, CISA added three vulnerabilities to its Known Exploited Vulnerabilities catalogue, confirming active exploitation in the wild. Two affect Check Point firewall management infrastructure (CVE-2026-93616 and CVE-2026-85102), allowing unauthenticated remote code execution. The third, CVE-2026-87902, is a critical path traversal flaw in WordPress core affecting approximately 43% of all websites globally. For UK small businesses, the primary risk lies not in direct exploitation but in unverified patching by managed…