CISA Warns of Multiple Check Point Product Vulnerabilities Exploited in Attacks
CISA says two Check Point flaws, including unauthenticated remote code execution, are being exploited.
88
Product
Security Gateway
- Mentions · 7d0
- Mentions · 30d0
- All mentions8
- First seenSep 10, 2026
- Last mentionedSep 25, 2026
Timeline
8 articles · newest firstCISA Warns of Check Point Vulnerabilities Exploited in Attacks (CVE-2026-85102 & CVE-2026-93616)
CISA says two critical Check Point VPN and management flaws are exploited in the wild.
88
Check Point Patches Exploited Management Server Zero-Day
Check Point patched exploited zero-day CVE-2026-93616 in Management Server, and CISA added it and CVE-2026-85102 to KEV.
86
Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks
Check Point says attackers exploited unauthenticated Management Server zero-day CVE-2026-93616 in targeted July attacks.
88
Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent
Dutch NCSC warns exploitation is imminent for critical Check Point VPN RCE flaws CVE-2026-85102 and CVE-2026-85103, urging immediate patching of Security Gateways.
78
Check Point Patches Critical VPN Vulnerabilities
Check Point patches two critical unauthenticated RCE flaws (CVE-2026-85102, CVE-2026-85103) in VPN gateways and firewalls; no exploitation observed.
60
Critical Check Point VPN Vulnerabilities Enable Remote Code Execution Attacks
Check Point patched two critical VPN flaws, CVE-2026-85102 and CVE-2026-85103 (CVSS 9.8), allowing unauthenticated RCE on Security Gateways.
70
2026-012: Critical Vulnerabilities in Check Point Products
Check Point issued emergency hotfixes for two CVSS 9.8 flaws (CVE-2026-85102, CVE-2026-85103) enabling unauthenticated RCE on VPN-enabled gateways.
80
Related CVEs
by mentions- CVE-2026-8510254%9.8Unauthenticated RCE in Check Point Quantum Security Gateway via certificate flaw
- Unauthenticated RCE in Check Point Quantum VPN Certificate ASN.1 Decoding
- CVE-2026-9361692%9.8Unauthenticated RCE in Check Point Management Server via Directory Traversal and File Upload
- CVE-2026-5075185%9.3Unauthenticated IKEv1 VPN Auth Bypass in Check Point Security Gateways
- CVE-2026-162324%9.3Authentication Bypass in Check Point SmartConsole Grants Full Admin Access
- CVE-2026-91843<1%9.8Unauthenticated stack overflow gives root RCE in Check Point login process
Appears with
- Check Pointvendor · 8
- Security Management Serverproduct · 7
- Spark Firewallproduct · 5
- CISAorganization · 3
- Check Pointorganization · 3
- SmartEventproduct · 2
- Nationaal Cyber Security Centrumorganization · 1
- Quantum Security Gatewayproduct · 1
- Check Point VPNproduct · 1
- Remote Access VPNproduct · 1
- CERT-EUorganization · 1
- Multi-Domain Security Managementproduct · 1
- Sparkproduct · 1
- CERT Santéorganization · 1
- Netherlands National Cyber Security Centreorganization · 1
- Qualysorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.