Check Point says two critical flaws in its VPN software can let an attacker take over affected systems without a username or password. The bugs are rated 9.8 out of 10 and involve certificate handling in Check Point VPN products; the article says they enable unauthenticated remote code execution, meaning code can be run over the network before login. Affected product and version details appear to center on Check Point VPN deployments, but the provided source excerpt does not include the CVE IDs or full version scope.
Arctic Wolf Labs
2026.09.14
97% relevant
This source adds patch and mitigation detail for the same two flaws, CVE-2026-85102 and CVE-2026-85103, including affected product lines, hotfix and LivePatch versions, attack surface notes for Remote Access and Site-to-Site VPN, and the fact that no in-the-wild exploitation or public PoC is known yet.
Bill Toulas
2026.09.12
93% relevant
This directly updates the same Check Point VPN flaw pair by adding a national cyber agency warning from the Dutch NCSC that exploitation is imminent, plus operational guidance to patch immediately and restrict Site-to-Site VPN access to trusted IPs.
Ionut Arghire
2026.09.11
97% relevant
This article reports the same underlying event and adds the CVE IDs (CVE-2026-85102 and CVE-2026-85103), affected products and versions, mitigation details for Site to Site VPN, and Check Point's statement that it has no evidence of in-the-wild exploitation.
info@thehackernews.com (The Hacker News)
2026.09.10
100% relevant
This article appears to be the first item here establishing a distinct event about two newly disclosed critical Check Point VPN certificate-handling flaws enabling unauthenticated remote code execution.