SecurityWeekIonut Arghire
Check Point Patches Critical VPN Vulnerabilities
Check Point has released patches for two critical vulnerabilities, CVE-2026-85102 and CVE-2026-85103, in its VPN gateway and firewall products, with a CVSS score of 9.8. These vulnerabilities allow for remote code execution without authentication, affecting the Security Gateway and Check Point Spark Firewall. Users are advised to define VPN rules manually as a mitigation measure, particularly for Site to Site VPN. The company confirms no evidence of these vulnerabilities being exploited in the wild. Security updates apply to versions R82.10, R82, and R81.20.
How the story developed
All 8 articles8 articles from 6 outlets over 20 days. This was the 3rd report, 2 days after the first.
8 articles from 6 outlets since 9 Sep; the latest 28 days ago.
- Article
- First report
- Official notice
Show as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Mon 28 Sep · 14:30 UTC | Check Point | Check Point Warns of Active Exploits and AI-Powered Attacks |
| Wed 23 Sep · 21:50 UTC | Security Affairs | CISA Warns of Active Attacks on Check Point and F5 Flaws |
| Wed 23 Sep · 06:26 UTC | SecurityWeek | Check Point Patches Critical Flaw Exploited in Active Attacks |
| Tue 22 Sep · 20:31 UTC | CISA | CISA Warns of Active Check Point Gateway Code Execution Flaw |
| Tue 22 Sep · 18:01 UTC | SecurityOnline | Attackers Target Check Point Gateways in Critical VPN Flaw |
| Fri 11 Sep · 11:48 UTC | SecurityWeek | Check Point Patches Critical VPN Vulnerabilities |
| Thu 10 Sep · 13:26 UTC | The Hacker News | Check Point Fixes Critical VPN Flaws Enabling Unauthenticated Code Execution |
| Wed 9 Sep · 15:59 UTC | SecurityOnline | Check Point Patches Critical VPN Flaws Enabling Remote Code Execution |
Who reported 6 outlets
- SecurityOnline2
- SecurityWeek2
- The Hacker News1
- CISA1
- Security Affairs1
- Check Point1
- Check Point Patches Critical VPN Flaws Enabling Remote Code ExecutionSecurityOnline · first report
- Check Point Patches Critical VPN VulnerabilitiesSecurityWeek · this article · 3 of 8
- CISA Warns of Active Attacks on Check Point and F5 FlawsSecurity Affairs