Check Point Multiple Products: Check Point Multiple Products Improper Certificate Validation Vulnerability
Critical CVSS 9.8 Listed in CISA KEV
Summary
Check Point Security Gateway and Check Point Spark Firewall using Site to Site VPN or Remote Access VPN contain an improper certificate validation vulnerability which could allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- Check Point:Multiple Products
Sources
- CISA KEV DATABASE
- NVD DATABASE
- Grok bot vulnerability crawler DATABASE
Original Links
- https://support.checkpoint.com/results/sk/sk1000117 reference
- https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk reference
- https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk reference
- https://nvd.nist.gov/vuln/detail/CVE-2026-85102 reference
- https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-85102
Timeline
- kev_ingest CISA KEV
- nvd_ingest NVD
- grok_bot_ingest Grok bot vulnerability crawler