CISA Warns of Multiple Check Point Product Vulnerabilities Exploited in Attacks
CISA says two Check Point flaws, including unauthenticated remote code execution, are being exploited.
CISA added two actively exploited Check Point vulnerabilities to the Known Exploited Vulnerabilities catalog on September 22, 2026, with a September 25 remediation deadline. CVE-2026-85102 is an improper certificate validation flaw in Security Gateway and Spark Firewall Site-to-Site or Remote Access VPN that lets an unauthenticated attacker execute arbitrary code. CVE-2026-93616 is a path traversal bug in management and logging products, including Security Management Server and SmartEvent, that allows unauthenticated upload and execution of arbitrary scripts. CISA says ransomware use is unknown and urges patching, exposure checks, and forensic review.
- CVE-2026-85102 allows unauthenticated remote code execution over VPN.
- CVE-2026-93616 lets attackers upload and execute arbitrary scripts.
- CISA added both flaws to the KEV catalog on September 22, 2026.
- The remediation deadline is September 25; ransomware use is unknown.
- Vendors
- Check Point
- Products
- Security GatewaySpark FirewallSecurity Management ServerMulti-Domain Security ManagementSmartEvent
- Organizations
- CISACheck Point
- Countries
- United States
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-85102 | Unauthenticated RCE in Check Point Quantum Security Gateway via certificate flaw | 9.8 | 54% | KEVPoC | KEV |
| CVE-2026-93616 | Unauthenticated RCE in Check Point Management Server via Directory Traversal and File Upload | 9.8 | 92% | KEVPoC | KEV |
From the original article
2 min read at cybersecuritynews.com
The U. S. Cybersecurity and Infrastructure Security Agency has added two Check Point vulnerabilities to its Known Exploited Vulnerabilities Catalog, warning that attackers are actively exploiting the flaws against affected environments.
By Abinaya · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.