importantSYS.SOURCE: The Hacker News• 2026-09-10T17:15:05+05:30

Check Point Identifies Critical 9.8 CVSS Vulnerabilities in VPN Certificate Handling for Remote Code Execution

#vulnerability #network security #check point #rce #certificate flaw

Check Point identified two critical vulnerabilities (CVE-2026-85102 and CVE-2026-85103) with CVSS scores of 9.8, enabling unauthenticated remote code execution through flawed VPN certificate handling in Security Gateways and Management Servers. Patches were released, but some customers face mitigation challenges and delayed remediation updates.

Check Point has patched two critical vulnerabilities in the way its firewall and management products handle VPN certificates. The company says both could allow an unauthenticated remote attacker to run code, but only "under specific conditions" that it has not described.

One flaw affects Check Point's Security Gateways, its firewall appliances. The other affects those gateways and the Security

Read original article

*** END OF TRANSMISSION ***

> CISA ADDS CRITICAL VULNERABILITIES IN COLLABORA ONLINE AND ARISTA VELOCLOUD TO KEV LIST > SAMSUNG TV REVERSE ENGINEERING REVEALS ON-BOARD AI AUDIO MONITORING CAPABILITIES > OBS STUDIO 33.0.0 RELEASE: CEF UPGRADE AND PLUGIN SYSTEM OVERHAUL > PERFORMANCE COMPARISON OF FUNCTIONAL PROGRAMMING LANGUAGES WITH C IN DEFLATE COMPRESSION > TECHNICAL ANALYSIS OF BLOCK BLAST'S AD-DRIVEN PLAYER EXPLOITATION MECHANISMS > APPLE SECURITY RESEARCH DEVICE PROGRAM FOR IOS VULNERABILITY RESEARCH > THE EVOLUTION OF DISTRIBUTED SQLITE: 12 YEARS OF INNOVATION AND ECOSYSTEM GROWTH > BANKING APPS EXPAND COMPATIBILITY WITH GRAPHENEOS > STARTUPS' CUSTOMER ACQUISITION STRATEGIES BEYOND VIRAL GROWTH > OPENAI SHIFTS AI TRAINING TO CACHED INTERNET DATA AMID SECURITY CONCERNS> CISA ADDS CRITICAL VULNERABILITIES IN COLLABORA ONLINE AND ARISTA VELOCLOUD TO KEV LIST > SAMSUNG TV REVERSE ENGINEERING REVEALS ON-BOARD AI AUDIO MONITORING CAPABILITIES > OBS STUDIO 33.0.0 RELEASE: CEF UPGRADE AND PLUGIN SYSTEM OVERHAUL > PERFORMANCE COMPARISON OF FUNCTIONAL PROGRAMMING LANGUAGES WITH C IN DEFLATE COMPRESSION > TECHNICAL ANALYSIS OF BLOCK BLAST'S AD-DRIVEN PLAYER EXPLOITATION MECHANISMS > APPLE SECURITY RESEARCH DEVICE PROGRAM FOR IOS VULNERABILITY RESEARCH > THE EVOLUTION OF DISTRIBUTED SQLITE: 12 YEARS OF INNOVATION AND ECOSYSTEM GROWTH > BANKING APPS EXPAND COMPATIBILITY WITH GRAPHENEOS > STARTUPS' CUSTOMER ACQUISITION STRATEGIES BEYOND VIRAL GROWTH > OPENAI SHIFTS AI TRAINING TO CACHED INTERNET DATA AMID SECURITY CONCERNS