
CISA Warns of Multiple Check Point Product Vulnerabilities Exploited in Attacks
CISA says two Check Point flaws, including unauthenticated remote code execution, are being exploited.
10 stories, newest first · one card per story

CISA says two Check Point flaws, including unauthenticated remote code execution, are being exploited.

CISA added two actively exploited Check Point flaws, including unauthenticated VPN code execution, to KEV.

Check Point confirms active exploitation of two CVSS 9.8 VPN and management flaws enabling unauthenticated code execution.

Check Point confirms active exploitation of pre-auth VPN RCE CVE-2026-85102 and zero-day CVE-2026-93616, now both in CISA KEV.

Check Point patched exploited zero-day CVE-2026-93616 in Management Server, and CISA added it and CVE-2026-85102 to KEV.

Check Point says CVE-2026-93616 is exploited to run code on unauthenticated management servers.

Check Point issued emergency hotfixes for actively exploited critical path traversal CVE-2026-93616 in Security Management Server.

Check Point says attackers exploited unauthenticated Management Server zero-day CVE-2026-93616 in targeted July attacks.

Check Point says attackers exploited critical Management Server zero-day CVE-2026-93616 for unauthenticated code execution.

Check Point patched CVE-2026-93616, an exploited unauthenticated Management Server zero-day.
Today 1.6K readers · 2.5K views · 778 reads · all time 189K views