Check Point Multiple Products Improper Certificate Validation Vulnerability (CVE-2026-85102)

CVE v události 2

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 9.8.

Jak se o tom psalo 8

1. 23. 9. 2026 21:53 · BleepingComputer US

   Check Point warns of hackers exploiting Security Gateway VPN RCE flaw

   Cybersecurity company Check Point has confirmed active exploitation of CVE-2026-85102, a pre-authentication remote code execution (RCE) vulnerability in the VPN certificate-handling functionality of its Security Gateway product. [...]

2. 22. 9. 2026 02:00 · CISA KEV US nadpis události

   Check Point Multiple Products Improper Certificate Validation Vulnerability (CVE-2026-85102)

   CISA added CVE-2026-85102 to the Known Exploited Vulnerabilities catalog. Affected product: Check Point Multiple Products. Remediation due date: 2026-09-25.

3. 12. 9. 2026 16:14 · BleepingComputer US

   Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent

   The Dutch Nationaal Cyber Security Centrum (NCSC) is warning of imminent exploitation of two critical flaws in Check Point VPN tracked as CVE-2026-85102 and CVE-2026-85103. [...]

4. 10. 9. 2026 11:12 · NCSC-NL NL

   NCSC-2026-0365 [1.00] [H/H] Kwetsbaarheden verholpen in Check Point VPN producten

   Check Point heeft 2 kritieke kwetsbaarheden verholpen. De kwetsbaarheid met kenmerk CVE-2026-85102 heeft een CVSS-score van 9,8. De kwetsbaarheid bevindt zich in het VPN-onderhandelingsproces van de Quantum Security Gateway en wordt veroorzaakt door onjuiste validatie van certificaatvertrouwen. Hierdoor kan een niet-geauthenticeerde externe aanvaller authenticatiecontroles omzeilen en willekeurige code uitvoeren op de Security Gateway. Exploitatie vindt plaats tijdens de VPN-onderhandeling,…

5. 10. 9. 2026 10:30 · CSIRT Itálie (ACN) IT

   Risolte vulnerabilità in prodotti Check Point

   Check Point ha rilasciato aggiornamenti di sicurezza che risolvono 2 vulnerabilità con gravità "critica" che interessano Security Gateway, Security Management e Spark Firewall, soluzioni dedicate alla protezione del perimetro di rete e alla gestione centralizzata della sicurezza. Le vulnerabilità potrebbero consentire ad un attaccante remoto non autenticato di eseguire codice arbitrario sui sistemi compromessi

6. 10. 9. 2026 10:20 · CERT-EU EU

   2026-012: Critical Vulnerabilities in Check Point Products

   On 9 September 2026, Check Point released emergency security updates addressing two critical vulnerabilities affecting Check Point Security Gateway, Security Management Server, and Spark Firewall deployments configured to use Remote Access VPN or Site-to-Site VPN. Both vulnerabilities carry a CVSS score of 9.8 and could allow an unauthenticated, remote attacker to execute arbitrary code on affected appliances. CERT-EU strongly recommends applying the available hotfixes as soon as possible,…

7. 10. 9. 2026 02:00 · CERT-FR – avis FR

   Multiples vulnérabilités dans les produits Check Point (10 septembre 2026)

   De multiples vulnérabilités ont été découvertes dans les produits Check Point. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et un contournement de la politique de sécurité.

8. 9. 9. 2026 21:30 · Cyber Centre Kanada CA

   Check Point security advisory (AV26-902)

   Serial Number: AV26-902Date: September 9, 2026 As of September 9, 2026, Check Point is affected by vulnerabilities in the following products: Security Gateway Multiple versions Check Point Spark Firewall using Site to Site VPN or Remote Access VPN Multiple versions Security Management Server Multiple versions Check Point Spark Firewall Multiple versions The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.…