Check Point VPN Flaws Allow Unauthenticated Remote Code Execution
Check Point has released patches for two critical vulnerabilities (CVE-2026-85102, CVE-2026-85103) in its VPN products. These flaws, rated 9.8 CVSS, involve how firewall and management products handle VPN certificates and could lead to unauthenticated remote code execution under specific conditions. The Dutch NCSC has issued a warning about imminent exploitation, urging immediate patching.