Hackers Exploit Critical Check Point VPN Flaws to Gain Remote Access Without Login
Check Point confirms active exploitation of two CVSS 9.8 VPN and management flaws enabling unauthenticated code execution.
88
Product
Check Point Spark Firewall
- Mentions · 7d0
- Mentions · 30d0
- All mentions3
- First seenSep 9, 2026
- Last mentionedSep 24, 2026
Timeline
3 articles · newest firstCISA Warns of Check Point Vulnerabilities Exploited in Attacks (CVE-2026-85102 & CVE-2026-93616)
CISA says two critical Check Point VPN and management flaws are exploited in the wild.
88
Check Point security advisory (AV26-902)
Canada's Cyber Centre issued advisory AV26-902 warning of two Check Point RCE flaws, including VPN authentication bypass CVE-2026-85102.
52
Related CVEs
by mentions- CVE-2026-8510254%9.8Unauthenticated RCE in Check Point Quantum Security Gateway via certificate flaw
- CVE-2026-9361692%9.8Unauthenticated RCE in Check Point Management Server via Directory Traversal and File Upload
- Unauthenticated RCE in Check Point Quantum VPN Certificate ASN.1 Decoding
Appears with
- Check Pointvendor · 3
- Check Point Security Gatewayproduct · 2
- Remote Access VPNproduct · 2
- Security Management Serverproduct · 1
- Qualysorganization · 1
- Check Pointorganization · 1
- Check Point Security Managementproduct · 1
- Check Point Security Management Serverproduct · 1
- Canadian Centre for Cyber Securityvendor · 1
- Security Gatewayproduct · 1
- CISAorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.