Check Point Quantum Security Management R82
Vulnerabilities, fixed releases, vendor recommendation and support status of the R82 branch, from official sources.
Patcharo matches 2 vulnerabilities against Check Point Quantum Security Management R82: 2 critical, 2 known exploited (CISA KEV). Newest fixed release stated by the vendor on this branch: none stated. Last source modification: 23 Sept 2026.
Last verified by Patcharo: 30 Sept 2026 at 03:17 UTC
In brief
- Matched CVEs
- 2
- CISA KEV
- 2
- Newest fix stated
- none stated
- Support
- Supported · 30 Apr 2029
- Recommended maintenance build
- R82 Take 127
- Recommended release
- R82.10 (another branch)
- CERT-FR
- 2 documents
Support status
From the vendor's published life-cycle policy; support is not a recommendation.
| Branch | Support | End of support |
|---|---|---|
| R82 | Supported | 30 Apr 2029 |
Check Point support life cycle policy · retrieved 30 Sept 2026 at 00:17 UTC
Vendor recommendation
The vendor's own statement about what to run, with its date and source. Separate from vulnerabilities and from support status: being behind a recommendation is not a vulnerability, and a supported release is not necessarily the recommended one.
Recommended release
R82.10 · since 16 Sept 2026
Vendor wording: “Check Point Recommended version for all deployments (with its latest Jumbo Hotfix Accumulator Take)”
Source: sk95746last verified by Patcharo 30 Sept 2026 at 00:17 UTC
Recommended maintenance build for R82
R82 Take 127 · since 22 Sept 2026
Vendor wording: “Each Jumbo Hotfix Accumulator is considered Recommended from the day of its release”
Policy: each newly released build is recommended from its release · stated 16 Sept 2026
Last build specifically declared as recommended: Take 122, on 10 Aug 2026 (kept as history)
History of the statement
- R82 Take 127 · current since 22 Sept 2026 · first read by Patcharo 29 Sept 2026
- R82 Take 122 · from 10 Aug 2026 to 29 Sept 2026
Source: Jumbo Hotfix Accumulator R82last verified by Patcharo 30 Sept 2026 at 00:17 UTC
Vulnerabilities affecting R82
Each record matched to this branch with the fixed release the source states, newest first.
| CVE | Severity | Fixed in | Published |
|---|---|---|---|
| CVE-2026-93616 Directory Traversal and File upload allows execution of arbitrary script on the Management Server | Critical9.8CVSS 3.1, CriticalKEV | after R82 JHF Take 126 | |
| CVE-2026-16232 Authentication Bypass in the SmartConsole Login Process Using an Application Token | Critical9.8CVSS 3.1, CriticalKEV | after R82 JHF Take 118 |
CERT-FR advisories and alerts
Documents of the French national CERT referencing these CVEs, newest first.
- Advisory (AVI)CERTFR-2026-AVI-1219Vulnérabilité dans Check Point Security Management ServerPublished 23 Sept 2026
- Advisory (AVI)CERTFR-2026-AVI-0912Multiples vulnérabilités dans les produits Check PointPublished 23 Jul 2026
How Patcharo reads this
Affected and fixed releases come from the vendor's structured statements, matched by exact version and patch level. The recommendation is the vendor's own statement; the support status comes from its life-cycle policy. Unknown never becomes Not affected.
Read the methodologyRead the guide: Check Point Jumbo Hotfix Accumulators and recommended releases