Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Check Point VPN certificate security patch release (CVE-2026-85102, CVE-2026-85103)

Security Patch Release
First reported
Last updated
Happening score
H score 53
2 unique sources, 3 articles

Summary

Hide ▲

Check Point began delivering fixes on September 9 for CVE-2026-85102 and CVE-2026-85103, two critical VPN certificate flaws in Security Gateways and Security Management Server. The release addresses unauthenticated remote code execution risk and gives customers remediation through Check Point Live Patch or the latest Jumbo Hotfix. Affected deployments include R82.10 / Jumbo Hotfix Take 43 or below, R82 / Take 125 or below, and R81.20 / Take 165 or below. Check Point says it found both issues itself and has no indication of attack use.

Related Happenings

Check Point security patch release for CVE-2026-93616

Security Patch Release
H score52 First: 23.09.2026 09:14 Last: 23.09.2026 09:14 Sources 1

About this happening: Check Point released R82.20 Security Hotfix (TAR) and updated Jumbo Hotfix Accumulator packages to fix CVE-2026-93616, a Management Server zero-day exploited i...

Open Happening

Microsoft security patch release for CVE-2026-65660

Security Patch Release
H score38 First: 22.09.2026 14:17 Last: 22.09.2026 14:17 Sources 1

About this happening: Microsoft's August 11 security updates shipped a fix for CVE-2026-65660 across SharePoint Server 2016, 2019, and Subscription Edition, reducing exposure to a flaw...

Open Happening

Check Point VPN certificate mitigation guidance

Advisory/Mitigation
H score53 First: 10.09.2026 14:45 Last: 10.09.2026 14:45 Sources 1

How related: Check Point gave customers two routes to the fix. The first is Check Point Live Patch. The company says customers using it are protected automatically as the rollout begins, which started on September 9.

About this happening: Check Point directed affected customers to Live Patch or the latest Jumbo Hotfix for its VPN certificate flaws, with rollout beginning on September 9. The guidance...

Open Happening

HPE ArubaOS-CX security bulletin (CVE-2026-73749)

Security Patch Release
H score31 First: 03.09.2026 21:28 Last: 03.09.2026 21:28 Sources 1

About this happening: HPE released a security bulletin for ArubaOS-CX that patches CVE-2026-73749, a buffer overflow that could let unauthenticated remote attackers reach remote code...

Open Happening

Paperclip security patch release for CVE-2026-41679

Security Patch Release
H score45 First: 05.08.2026 17:30 Last: 05.08.2026 17:30 Sources 1

About this happening: Paperclip shipped 2026.416.0 and 0.3.1 to close three disclosed vulnerabilities that could expose data and enable unauthenticated command execution. The releas...

Open Happening

Timeline

  1. 22.09.2026 21:29 1 articles · 1d ago

    Attackers target Spark customers with Check Point VPN exploit attempts

    Campaign Scope Update

    Check Point said attackers have been trying since September 12 to exploit CVE-2026-85102, a VPN certificate flaw fixed on September 9, and the attempts have targeted customers of Spark, its firewall line for small businesses. The activity came from anonymizing infrastructure, including VPN services and proxies, and used certificate subjects such as CN=vpn,OU=users,O=global, CN=vpn-user,OU=users,O=global, and CN=vpnuser,OU=users,O=global.

    Show sources
    Open in new tab
  2. 12.09.2026 17:14 1 articles · 11d ago

    Dutch NCSC warns Check Point VPN exploitation is imminent

    Mitigation Patch Update

    The Dutch Nationaal Cyber Security Centrum (NCSC) warned that exploitation of CVE-2026-85102 and CVE-2026-85103 in Check Point VPN is expected soon, urged administrators to install the security updates, and advised Site-to-Site VPN users to restrict access to trusted IP addresses. The NCSC also said Check Point LivePatch users should have received protections for the flaws since September 9.

    Show sources
    Open in new tab
  3. 09.09.2026 03:00 2 articles · 15d ago

    Check Point discloses two critical VPN certificate flaws and begins same-day fixes

    Initial Disclosure

    Check Point disclosed CVE-2026-85102 and CVE-2026-85103 on September 9, saying the critical VPN certificate flaws could let an unauthenticated remote attacker run code on Security Gateways and Security Management Server systems under unspecified conditions while fixes began rolling out the same day.

    Show sources
    Open in new tab
  4. 09.09.2026 03:00 1 articles · 15d ago

    Check Point details certificate trust validation failure and ASN.1 buffer overflow in VPN handling

    Technical Analysis Update

    Check Point described CVE-2026-85102 as a failure to properly validate certificate trust during VPN negotiation and CVE-2026-85103 as a heap-based buffer overflow while decoding the ASN.1 structure of a VPN certificate, with the CVE records tying the issues to Security Gateway and Quantum Security Management and Security Gateway systems.

    Show sources
    Open in new tab