Check Point Quantum Security Gateway

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenSep 23, 2026
Last mentionedSep 23, 2026

Timeline

1 articles · newest first

Attackers hit Check Point Management Servers and Spark firewalls, F5 BIG-IP APM instances

CISA adds four actively exploited zero-days to KEV, forcing immediate patching of critical flaws in Check Point, Arista, and F5 systems.

Help Net SecuritySep 23, 10:22 UTC · Sep 23, 2026VulnerabilityExploitedCVE-2026-93616 CVE-2026-85102 CVE-2026-93952+13 · 1 read

Related CVEs

by mentions

CVE-2026-8510254%9.8
Unauthenticated RCE in Check Point Quantum Security Gateway via certificate flaw
published Sep 9, 2026Check Point Quantum Security Gateway (VPN negotiation functionality)KEVPoC
CVE-2026-9361692%9.8
Unauthenticated RCE in Check Point Management Server via Directory Traversal and File Upload
published Sep 22, 2026Check Point Management ServerKEVPoC
CVE-2026-939521%9.5
Unauthenticated Input-Validation Flaw in VeloCloud Orchestrator (On-Prem)
published Sep 22, 2026Arista (VeloCloud; formerly VMware/Broadcom) VeloCloud Orchestrator (VCO), on-premisesKEV
CVE-2026-9412727%9.3
Unauthenticated Heap-Overflow RCE in F5 BIG-IP APM with OAuth Profile
published Sep 22, 2026F5 BIG-IP (Access Policy Manager)KEVPoC ×2

Appears with

F5 Networksvendor · 1
Check Point Spark Firewallsproduct · 1
Check Point Management Serverproduct · 1
CISAorganization · 1
F5 Networksorganization · 1
Aristavendor · 1
Check Point Softwarevendor · 1
Aristaorganization · 1
Arista VeloCloud Orchestratorproduct · 1
Check Point Softwareorganization · 1
F5 BIG-IP APMproduct · 1

Entities are extracted by the model from each article. First seen Sep 23, 2026, last mentioned Sep 23, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.