Check Point Pre-Auth Flaws Under Attack

Check Point says two critical pre-authentication flaws, including CVE-2026-85102, are being actively exploited.

Check Point warned that two critical pre-authentication vulnerabilities in its security products are being actively exploited. The available report identifies CVE-2026-85102 as affecting VPN certificate handling, but the text cuts off before naming the second flaw or the full product list. Because the bugs require no authentication and exploitation is already underway, exposed Check Point VPN and security appliances are an urgent patching priority.