Warning: Unauthenticated RCE in Check Point VPN Products, Patch Immediately!

**Check Point critical VPN vulnerabilities (CVE-2026-85102 & CVE-2026-85103):** Two critical pre-authentication flaws in Check Point Security Gateway, Security Management Server and Spark Firewall (R81.20, R82, R82.10 and some EoS versions) allow unauthenticated remote attackers to trigger arbitrary code execution via crafted VPN certificates (improper certificate validation and ASN.1 heap overflow). Emergency fixes and LivePatch updates were released; administrators are urged to apply patches, verify LivePatch installation, and follow provided temporary mitigations where applicable, noting that some older releases will not be fixed.