CISA Warns of Multiple Check Point Product Vulnerabilities Exploited in Attacks
CISA says two Check Point flaws, including unauthenticated remote code execution, are being exploited.
88
Product
Spark Firewall
- Mentions · 7d0
- Mentions · 30d0
- All mentions7
- First seenSep 10, 2026
- Last mentionedSep 25, 2026
Timeline
7 articles · newest firstCISA Adds Multiple Check Point Product Flaws to Exploited Vulnerabilities List
CISA added two actively exploited Check Point flaws, including unauthenticated VPN code execution, to KEV.
86
Check Point Patches Exploited Management Server Zero-Day
Check Point patched exploited zero-day CVE-2026-93616 in Management Server, and CISA added it and CVE-2026-85102 to KEV.
86
Check Point Patches Critical VPN Vulnerabilities
Check Point patches two critical unauthenticated RCE flaws (CVE-2026-85102, CVE-2026-85103) in VPN gateways and firewalls; no exploitation observed.
60
Critical Check Point VPN Vulnerabilities Enable Remote Code Execution Attacks
Check Point patched two critical VPN flaws, CVE-2026-85102 and CVE-2026-85103 (CVSS 9.8), allowing unauthenticated RCE on Security Gateways.
70
Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE
Check Point patched two 9.8-rated VPN certificate flaws, CVE-2026-85102 and CVE-2026-85103, enabling unauthenticated remote code execution; no exploitation observed yet.
62
2026-012: Critical Vulnerabilities in Check Point Products
Check Point issued emergency hotfixes for two CVSS 9.8 flaws (CVE-2026-85102, CVE-2026-85103) enabling unauthenticated RCE on VPN-enabled gateways.
80
Related CVEs
by mentions- CVE-2026-8510254%9.8Unauthenticated RCE in Check Point Quantum Security Gateway via certificate flaw
- Unauthenticated RCE in Check Point Quantum VPN Certificate ASN.1 Decoding
- CVE-2026-9361692%9.8Unauthenticated RCE in Check Point Management Server via Directory Traversal and File Upload
- CVE-2026-5075185%9.3Unauthenticated IKEv1 VPN Auth Bypass in Check Point Security Gateways
- CVE-2026-162324%9.3Authentication Bypass in Check Point SmartConsole Grants Full Admin Access
Appears with
- Check Pointvendor · 7
- Security Management Serverproduct · 6
- Security Gatewayproduct · 5
- CISAorganization · 4
- SmartEventproduct · 3
- Check Pointorganization · 3
- Quantum Security Gatewayproduct · 2
- Multi-Domain Security Managementproduct · 1
- Check Point Security Gatewayproduct · 1
- Canadian Centre for Cyber Securityorganization · 1
- CERT-EUorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.