CVE-2026-88361
📛 CVE Title
CVE-2026-88361
Description
SumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::BuildPageLabelRec() when parsing PDF PageLabels /Nums entries.
Overview
- State
- PUBLISHED
- Assigner (CNA)
- mitre
- CVSS severity
- —
- CVSS score
- —
- CVSS vector
- —
- Effective score
- no score available from CNA, NVD, or AI yet
- CWE(s)
- —
- Reserved
- 2026-09-10
- Published
- 2026-09-24 00:00 UTC
- Last updated
- 2026-09-25 18:05 UTC
- Source
- https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/88xxx/CVE-2026-88361.json
NVD / KEV / EPSS data refreshed 2026-09-25 04:34 UTC. Re-run the 🛰 Backfill from NVD button above to refresh.
AI-forensic CVSS estimate
Used only when a CVE has no official CVSS from its CNA or NVD. An LLM estimates the v3.1 base score from the description; a HIGH/CRITICAL estimate promotes the CVE to a Threat.
No AI estimate yet — it runs automatically once NVD has been checked, or click the button above.
European Union Vulnerability Database ENISA EUVD
ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.
- EUVD ID
-
EUVD-2026-86287 - Assigner
- mitre
- Published
- Sep 24, 2026, 12:00:00 AM
- Updated
- Sep 24, 2026, 3:25:58 PM
- EUVD base score
- 0.0 / 10
- EUVD-reported EPSS
- 0.0000
- Vendors
- n/a
- Products
-
n/a (n/a)
- Aliases
-
GHSA-42pv-g2vh-7hf6
ENISA description: SumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::BuildPageLabelRec() when parsing PDF PageLabels /Nums entries.
Affected products (1)
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| n/a | n/a |
n/a (affected)
|
— |
Vendor references (3)
References embedded in the original CVE record by the assigning CNA.
Web references (0)
DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.
No web references attached yet.
Remediations (10)
-
web:aicybr.com
The two flaws require separate remediation checks. CVE - 2026 -93616 targets the management-server web service and was fixed on September 22; CVE - 2026 -85102 targets VPN certificate handling and had a fix available from September 9.
2026-09-25 10:46 UTC -
web:aviatrix.ai
Check Point warns of active exploitation of critical zero-day CVE - 2026 -93616 in Security Management Servers and VPN flaw CVE - 2026 -85102 targeting Spark firewalls.
2026-09-25 10:46 UTC -
web:cyberpress.org
Check Point has disclosed an actively exploited zero-day vulnerability in its management infrastructure that lets unauthenticated attackers upload and run arbitrary scripts on vulnerable servers.
2026-09-25 10:46 UTC -
web:fixitphill.com
CVE - 2026 -93616 affects Check Point management and logging servers. Check affected versions, apply the supported hotfix, and verify policy and logs.
2026-09-25 10:46 UTC -
web:joeseanor.com
If your organization runs Check Point's Security Management Server, stop what you are doing and read this. CISA just added CVE - 2026 -93616 to its Known Exploited Vulnerabilities catalog because attackers are already using it in the wild. The bug is a pre-authentication path traversal that lets anyone on the network upload and run arbitrary scripts on […]
2026-09-25 10:46 UTC -
web:labs.beazley.security
Executive Summary On September 22 nd, 2026 , Check Point released emergency hotfixes for a critical vulnerability in its Management Server products and confirmed that attackers had already exploited it as a zero-day. Tracked as CVE - 2026 -93616, the vulnerability allows an unauthenticated remote attacker to traverse outside the intended directory in the Management web service and upload scripts ...
2026-09-25 10:46 UTC -
web:securityaffairs.com
Check Point fixes an actively exploited flaw that lets unauthenticated attackers upload and run scripts on vulnerable Security Management Servers. Check Point has released emergency hotfixes for CVE - 2026 -93616, a critical path traversal flaw in its Security Management Server. Attackers can abuse the ...
2026-09-25 10:46 UTC -
web:securityarsenal.com
CISA has added CVE - 2026 -93616 to the KEV catalog: an unauthenticated path traversal in Check Point Security Management, Log Server, and SmartEvent enabling arbitrary script execution. Patch and hunt now.
2026-09-25 10:46 UTC -
web:www.esecurityplanet.com
Check Point patched CVE - 2026 -93616 after zero-day attacks. See affected Security Management versions, fixed builds, mitigations , and defender actions.
2026-09-25 10:46 UTC -
web:www.rescana.com
Check Point Security Gateway and Management CVE - 2026 -85102 and CVE - 2026 -93616 are critical CVSS 9.8 flaws added to CISA KEV on September 22, 2026 . Patch both planes and run forensic triage.
2026-09-25 10:46 UTC
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.
Raw JSON
The full cvelistV5 record. Download as CVE-2026-88361.json.
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-88361",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-25T18:05:40.308342Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-190",
"description": "CWE-190 Integer Overflow or Wraparound",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-25T18:05:53.532Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/sumatrapdfreader/sumatrapdf/issues/5952"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "SumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::BuildPageLabelRec() when parsing PDF PageLabels /Nums entries."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-24T15:25:58.560Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://github.com/sumatrapdfreader/sumatrapdf/issues/5952"
},
{
"url": "https://github.com/haimag/sumatrapdf/commit/8b999ff1bf0a8df244e75440682a3fd9a038eb2d"
},
{
"url": "https://github.com/chenjiefeng2001/sumatrapdf_folked/commit/b22a8c71ddc9de80ece5f88d14b434c20fee912e"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2026-88361",
"datePublished": "2026-09-24T00:00:00.000Z",
"dateReserved": "2026-09-10T00:00:00.000Z",
"dateUpdated": "2026-09-25T18:05:53.532Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}