Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Check Point VPN certificate mitigation guidance

Advisory/Mitigation
First reported
Last updated
Happening score
H score 53
2 unique sources, 3 articles

Summary

Hide ▲

Check Point directed affected customers to Live Patch or the latest Jumbo Hotfix for its VPN certificate flaws, with rollout beginning on September 9. The guidance matters because some deployments could not patch immediately and had to rely on mitigation steps instead.

Related Happenings

Check Point security patch release for CVE-2026-93616

Security Patch Release
H score52 First: 23.09.2026 09:14 Last: 23.09.2026 09:14 Sources 1

About this happening: Check Point released R82.20 Security Hotfix (TAR) and updated Jumbo Hotfix Accumulator packages to fix CVE-2026-93616, a Management Server zero-day exploited i...

Open Happening

Check Point Security Management and Log Servers stack overflow security flaw (CVE-2026-91843)

Vulnerability
H score46 First: 17.09.2026 21:08 Last: 17.09.2026 21:08 Sources 1

About this happening: Check Point Security Management Server and Log Server deployments are affected by CVE-2026-91843, a critical stack-based buffer overflow in the login process that...

Latest development: 18.09.2026 03:00

Check Point confirms that R82.20, standalone deployments, Log Servers, and Multi-Domain servers are vulnerable, and says customers who need fixes for out-of-support versions should open a ticket with Check Point support.

Open Happening

Check Point VPN certificate security patch release (CVE-2026-85102, CVE-2026-85103)

Security Patch Release
H score53 First: 10.09.2026 14:45 Last: 10.09.2026 14:45 Sources 1

How related: Check Point disclosed the flaws on September 9 in a notice to its customer community, and began delivering fixes the same day.

About this happening: Check Point began delivering fixes on September 9 for CVE-2026-85102 and CVE-2026-85103, two critical VPN certificate flaws in Security Gateways and Secu...

Latest development: 22.09.2026 21:29

Check Point said attackers have been trying since September 12 to exploit CVE-2026-85102, a VPN certificate flaw fixed on September 9, and the attempts have targeted customers of Spark, its firewall line for small businesses. The activity came from anonymizing infrastructure, including VPN services and proxies, and used certificate subjects such as CN=vpn,OU=users,O=global, CN=vpn-user,OU=users,O=global, and CN=vpnuser,OU=users,O=global.

Open Happening

Check Point Security Gateways and Security Management Server VPN certificate flaws (multiple vulnerabilities)

Vulnerability
H score53 First: 10.09.2026 14:45 Last: 10.09.2026 14:45 Sources 1

How related: Cybersecurity company Check Point has confirmed active exploitation of CVE-2026-85102, a pre-authentication remote code execution (RCE) vulnerability in the VPN certificate-handling functionality of its Security Gateway product.

About this happening: Check Point Security Gateways and Security Management Server are affected by two critical VPN certificate flaws, CVE-2026-85102 and CVE-2026-85103, that can let an...

Latest development: 23.09.2026 22:53

Check Point observed a wave of exploitation attempts against Spark customers starting September 12, 2026, with attackers using VPN services and proxies to hide their location.

Open Happening

CISA mitigation guidance for CISA Adds Cisco Secure FMC CVE-2026-20079 to KEV Sets Sept. 12 Deadline

Advisory/Mitigation
H score58 First: 10.09.2026 00:40 Last: 10.09.2026 00:40 Sources 1

About this happening: CISA added CVE-2026-20079 to the KEV catalog and gave Federal Civilian Executive Branch agencies a September 12, 2026 deadline to secure affected Cisco Secur...

Open Happening

Timeline

  1. 10.09.2026 14:45 1 articles · 13d ago

    Check Point discloses two critical VPN certificate flaws

    Initial Disclosure

    Check Point disclosed two critical VPN-certificate vulnerabilities affecting Security Gateways and Security Management Server, saying the flaws could let an unauthenticated remote attacker run code under specific conditions and that it had found both issues itself. The company said it had no indication either flaw had been used in an attack.

    Show sources
    Open in new tab
  2. 10.09.2026 14:45 4 articles · 13d ago

    Check Point starts Live Patch rollout for VPN certificate flaws

    Mitigation Patch Update

    Check Point began delivering fixes through Live Patch on September 9, 2026 and told customers to install the latest Jumbo Hotfix for their deployed version. A Check Point employee said Live Patch could be installed on top of any Jumbo Hotfix level in R81.20, R82.00 and R82.10, while some R81.10 customers said no Live Patch or Jumbo Hotfix was available for that branch and that mitigation was the only option.

    Show sources
    Open in new tab