Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Check Point Security Gateways and Security Management Server VPN certificate flaws (multiple vulnerabilities)

Vulnerability
First reported
Last updated
Happening score
H score 53
2 unique sources, 2 articles

Summary

Hide ▲

Check Point Security Gateways and Security Management Server are affected by two critical VPN certificate flaws, CVE-2026-85102 and CVE-2026-85103, that can let an unauthenticated remote attacker execute code under specific conditions. Check Point disclosed the issues on September 9 and began delivering fixes the same day. The company says it has no indication of exploitation.

Related Happenings

Check Point Management Server directory traversal/file upload zero-day (CVE-2026-93616)

Vulnerability
H score45 First: 23.09.2026 09:14 Last: 23.09.2026 09:14 Sources 1

About this happening: Check Point issued urgent fixes for CVE-2026-93616, a critical zero-day in Management Server products that is being exploited in the wild. The flaw is a dire...

Open Happening

Check Point Security Management and Log Servers stack overflow security flaw (CVE-2026-91843)

Vulnerability
H score46 First: 17.09.2026 21:08 Last: 17.09.2026 21:08 Sources 1

About this happening: Check Point Security Management Server and Log Server deployments are affected by CVE-2026-91843, a critical stack-based buffer overflow in the login process that...

Latest development: 18.09.2026 03:00

Check Point confirms that R82.20, standalone deployments, Log Servers, and Multi-Domain servers are vulnerable, and says customers who need fixes for out-of-support versions should open a ticket with Check Point support.

Open Happening

Check Point VPN certificate mitigation guidance

Advisory/Mitigation
H score53 First: 10.09.2026 14:45 Last: 10.09.2026 14:45 Sources 1

How related: Check Point gave customers two routes to the fix. The first is Check Point Live Patch. The company says customers using it are protected automatically as the rollout begins, which started on September 9.

About this happening: Check Point directed affected customers to Live Patch or the latest Jumbo Hotfix for its VPN certificate flaws, with rollout beginning on September 9. The guidance...

Open Happening

SmartConsole actively exploited authentication bypass (CVE-2026-16232)

Vulnerability
H score43 First: 23.07.2026 11:13 Last: 23.07.2026 11:13 Sources 1

About this happening: Check Point addressed CVE-2026-16232, a zero-day authentication bypass in SmartConsole affecting Security Management and Multi-Domain Management products....

Open Happening

CISA KEV catalog addition for SonicWall SMA 1000 flaws

Public Sector Action
H score34 First: 15.07.2026 08:30 Last: 15.07.2026 08:30 Sources 1

About this happening: CISA added CVE-2026-15409 and CVE-2026-15410 affecting SonicWall SMA 1000 appliances to the Known Exploited Vulnerabilities (KEV) catalog on July 14, 2026,...

Open Happening

Timeline

  1. 23.09.2026 22:53 1 articles · 15h ago

    Spark customers face exploitation attempts using VPNs and proxies

    Exploitation Observed

    Check Point observed a wave of exploitation attempts against Spark customers starting September 12, 2026, with attackers using VPN services and proxies to hide their location.

    Show sources
    Open in new tab
  2. 10.09.2026 14:45 2 articles · 13d ago

    Check Point discloses two critical VPN certificate flaws

    Initial Disclosure

    Check Point disclosed two critical VPN certificate vulnerabilities affecting Security Gateways and Security Management Server, assigning CVE-2026-85102 and CVE-2026-85103 CVSS scores of 9.8. The company said it found both issues itself and had no indication that either flaw had been used in an attack, even though both could let an unauthenticated remote attacker run code under specific conditions.

    Show sources
    Open in new tab
  3. 10.09.2026 14:45 1 articles · 13d ago

    Check Point begins delivering fixes for VPN certificate flaws

    Mitigation Patch Update

    Check Point began delivering fixes for the VPN certificate vulnerabilities the same day and told customers to use Check Point Live Patch or the latest Jumbo Hotfix for the deployed version. The company said Live Patch rollout started on September 9 and that it could be installed on top of any Jumbo Hotfix level in R81.20, R82.00 and R82.10.

    Show sources
    Open in new tab