Hvězdička u CVE znamená, že jsem to číslo vytáhl z širšího textu článku. Neukazuju u něj proto KEV, EPSS ani CVSS, a to preventivně, protože článek se na něj mohl jen odkazovat, třeba jako na starší kauzu.
Cybersecurity company Check Point has confirmed active exploitation of CVE-2026-85102, a pre-authentication remote code execution (RCE) vulnerability in the VPN certificate-handling functionality of its Security Gateway product. [...]
KEV ✓ EPSS 0.54 CVE-2026-85102 Check Point US
A Nemzetbiztonsági Szakszolgálat Nemzeti Kiberbiztonsági Intézet riasztást ad ki a Check Point Security Management Servert érintő CVE-2026-93616 azonosítójú, aktívan kihasznált kritikus sérülékenység kapcsán. A CVSS 9,8-as, előzetes hitelesítés nélkül kihasználható sérülékenység a Check Point Security Management webszolgáltatásában. A hiba directory/path traversal és fájlfeltöltési problémán alapul, amelynek kihasználásával a támadó tetszőleges útvonalról scriptet futtathat, illetve tetszőleges…
KEV ✓ EPSS 0.92 CVSS 9.8 CVE-2026-93616 Check Point HU FR IT US
Check Point heeft een kwetsbaarheid verholpen in Security Management en Log Servers. De kwetsbaarheid betreft een pre-authentication directory-traversal-kwetsbaarheid in de Check Point Management Web Service, waarmee ongeauthenticeerde aanvallers scripts vanaf een willekeurig pad kunnen uitvoeren. De kwetsbaarheid kan leiden tot remote code execution en treft meerdere Check Point Management- en Logging-componenten. Check Point meldt dat de kwetsbaarheid actief wordt geëxploiteerd en heeft deze…
Check Point NL
Check Point Software released emergency hotfixes to address a critical Security Management Server vulnerability that could let attackers run arbitrary scripts. [...]
CVE-2024-24919 * CVE-2026-16232 * CVE-2026-50751 * CVE-2026-85102 * CVE-2026-85103 * CVE-2026-93616 * Check Point US
Check Point Software has released security updates to address a critical vulnerability that can let attackers execute code with root privileges on management systems. [...]
CVE-2026-16232 * CVE-2026-50751 * CVE-2026-85102 * CVE-2026-85103 * CVE-2026-91843 * Check Point US
Check Point heeft een kwetsbaarheid verholpen in Check Point's Security Management and Log Servers. De kwetsbaarheid betreft een stack overflow die optreedt tijdens het ongeauthenticeerde inlogproces. Een aanvaller kan deze kwetsbaarheid op afstand misbruiken om willekeurige code uit te voeren met rootrechten. Hierdoor kan de aanvaller authenticatie omzeilen en volledige controle over het systeem verkrijgen. Voor exploitatie is geen voorafgaande authenticatie vereist.
Check Point NL
Serial number: AV26-933Date: September 17, 2026 As of September 16, 2026, Check Point is affected by a vulnerability in the following products: Security Management Server, Multi-Domain Security Management Server, Log Server and Multi-Domain Log Server R81.20 with Jumbo Hotfix Take 166 and prior R82 with Jumbo Hotfix Take 126 and prior R82.10 with Jumbo Hotfix Take 44 and prior R82.20 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary…
EPSS 0.01 CVE-2026-91843 Check Point CA IT FR
The Dutch Nationaal Cyber Security Centrum (NCSC) is warning of imminent exploitation of two critical flaws in Check Point VPN tracked as CVE-2026-85102 and CVE-2026-85103. [...]
KEV ✓ EPSS 0.54 CVE-2026-85102 CVE-2026-85103 Check Point US NL IT FR CA
Classification: Critical, Solution: Official Fix, Exploit Maturity: Unproven, CVSSv3.1: 9.8, CVEs: CVE-2026-85102, CVE-2026-8510, Summary: Check Point research team has identified and remediated two critical VPN-related vulnerabilities, CVE-2026-85102 and CVE-2026-85103, which could potentially allow unauthenticated remote code execution under specific conditions. These issues were discovered internally, and we have no indication of active exploitation. To ensure continued protection, we…
KEV ✓ EPSS 0.54 CVSS 9.8 CVE-2026-8510 CVE-2026-85102 CVE-2026-85103 Check Point FI
On 9 September 2026, Check Point released emergency security updates addressing two critical vulnerabilities affecting Check Point Security Gateway, Security Management Server, and Spark Firewall deployments configured to use Remote Access VPN or Site-to-Site VPN. Both vulnerabilities carry a CVSS score of 9.8 and could allow an unauthenticated, remote attacker to execute arbitrary code on affected appliances. CERT-EU strongly recommends applying the available hotfixes as soon as possible,…
CVSS 9.8 Check Point EU