Tag: Check Point

Check Point has confirmed active attacks against a Check Point VPN flaw that can allow remote code execution before authentication. The company also warns that attackers are exploiting a separate flaw in its Management web service. Attacks Against VPN Gateways Began in September The VPN vulnerability, CVE-2026-85102, affects how Check Point Security Gateway handles certificates.…

Check Point has released emergency hotfixes for a critical Security Management Server vulnerability. The company says attackers have already targeted a handful of customers. The Check Point zero-day, tracked as CVE-2026-93616, lets attackers upload and run scripts on vulnerable systems without signing in. Check Point urges administrators to apply the hotfix and investigate possible compromise.…

The Dutch National Cyber Security Centre has warned organisations to patch two critical Check Point VPN flaws immediately. The agency believes attackers could begin exploiting the vulnerabilities soon, despite the lack of a public proof-of-concept exploit. Tracked as CVE-2026-85102 and CVE-2026-85103, both security issues can enable remote code execution. Successful attacks could therefore give threat…

Check Point has fixed an actively exploited zero-day vulnerability in SmartConsole, the graphical administration interface for its security management products. The flaw, tracked as CVE-2026-16232, allows an unauthenticated attacker to obtain an application login token and authenticate with administrator-level privileges. Check Point said the Check Point SmartConsole zero-day has affected a very small number of…