Critical Check Point VPN Vulnerabilities Enable Remote Code Execution Attacks

**Check Point disclosed and patched two critical VPN vulnerabilities (CVE-2026-85102 — improper certificate trust validation; CVE-2026-85103 — ASN.1 heap-based buffer overflow) rated CVSS 9.8 that can enable unauthenticated remote code execution across Security Gateway, Security Management, and Spark Firewall deployments; no active exploitation or public PoC has been observed, and administrators are urged to apply Live Patch or the specified Jumbo Hotfix Accumulators immediately, with limited mitigations available for Site-to-Site VPNs.**