Check Point Patches Two Critical RCE Bugs in VPN Certificate Handling
ID: f411826a-f23e-5532-91b8-1af565faed77
STIX ID: report--f411826a-f23e-5532-91b8-1af565faed77
Feed Name: Kudelski Security
Threat Score
Check Point disclosed and patched two critical vulnerabilities (CVE-2026-85102 and CVE-2026-85103, CVSS 9.8) in firewall and management products that can lead to unauthenticated remote code execution through improper VPN certificate validation and ASN.1 decoding; fixes are available via LivePatch and Jumbo Hotfix Accumulator, R82.20 is not affected, and no evidence of external exploitation was observed as of September 9, 2026.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.