Cybersecurity firm Check Point has confirmed the active exploitation of CVE-2026-85102, a critical pre-authentication remote code execution (RCE) vulnerability affecting its Security Gateway product. This flaw resides within the VPN's certificate-handling functionality, allowing unauthenticated attackers to execute arbitrary code…
Reports mentioning Check Point
Check Point disclosed a zero-day vulnerability, identified as CVE-2026-93616, that was exploited in a limited number of targeted attacks on July 23, according to a company statement. This previously unknown flaw affects Check Point's Security Management Server, a critical component…
A critical vulnerability has been identified in Check Point's Security Management and Log Servers, enabling unauthenticated attackers to execute arbitrary code with root privileges over a network connection. This flaw, designated CVE-2024-24762, affects specific versions of the Security Management Server…
Check Point has released patches for two critical vulnerabilities discovered in the handling of VPN certificates within its firewall and management products. These flaws, both rated with a severity score of 9.8 out of 10, could potentially enable an unauthenticated…
Cybersecurity researchers have released a public proof-of-concept (PoC) for a critical authentication bypass vulnerability affecting Check Point's SmartConsole, a component used for managing its security products. This vulnerability, officially designated as CVE-2026-16232, carries a high severity CVSS score of 9.3…
Check Point issued a warning on March 18, 2024, about the active exploitation of a critical vulnerability affecting Remote Access VPN and Mobile Access deployments using the IKEv1 protocol. The flaw, identified as CVE-2026-50751 with a CVSS score of 9.3…