
CISA Warns of Multiple Check Point Product Vulnerabilities Exploited in Attacks
CISA says two Check Point flaws, including unauthenticated remote code execution, are being exploited.
10 stories, newest first · one card per story

CISA says two Check Point flaws, including unauthenticated remote code execution, are being exploited.

CISA added two actively exploited Check Point flaws, including unauthenticated VPN code execution, to KEV.

Check Point says two critical pre-authentication flaws, including CVE-2026-85102, are being actively exploited.

Check Point confirms active exploitation of two CVSS 9.8 VPN and management flaws enabling unauthenticated code execution.

Attackers are exploiting two pre-authentication Check Point firewall flaws rated CVSS 9.8.

Check Point confirms active exploitation of pre-auth VPN RCE CVE-2026-85102 and zero-day CVE-2026-93616, now both in CISA KEV.

Check Point patched exploited zero-day CVE-2026-93616 in Management Server, and CISA added it and CVE-2026-85102 to KEV.

Check Point says attackers exploited unauthenticated Management Server zero-day CVE-2026-93616 in targeted July attacks.

Dutch NCSC warns two CVSS 9.8 Check Point VPN flaws enable unauthenticated RCE; patch and restrict access before exploitation begins.

Dutch NCSC warns of two critical CVSS 9.8 Check Point VPN flaws enabling unauthenticated remote code execution, urging immediate patching before mass exploitation.
Today 1.6K readers · 2.5K views · 778 reads · all time 189K views