Check Point VPN Critical RCE Vulnerabilities CVE-2026-85102 & CVE-2026-85103
ID: 89df98f5-ef29-5a74-8de5-1357f6a21371
STIX ID: report--89df98f5-ef29-5a74-8de5-1357f6a21371
Feed Name: Arctic Wolf
Threat Score
## Executive Summary Two critical Check Point vulnerabilities (CVE-2026-85102: improper certificate validation during VPN negotiation; CVE-2026-85103: heap overflow in ASN.1 certificate decoding) allow unauthenticated RCE (CVSS 9.8) across Security Gateway, Management Server and Spark Firewall; vendor LivePatch and Jumbo Hotfixes are available and organizations must immediately patch, restrict VPN exposure, and monitor systems.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.