Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
Filtered Reports
16 / 16 results
criticalbug_reportVulnerabilityCheck Point Security Gateway VPN RCE exploited in the wild since Sept 12
Check Point Security Gateway VPN product (all versions). Vulnerable versions: R81.10, R81.20, R82, R82.10. Also affects Spark firewalls. CVE-2026-85102 impacts VPN certificate-handling; CVE-2026-93616 (Management web service path traversal, exploited…
criticalbug_reportVulnerabilityCheck Point Management Server RCE under active exploitation (CVE-2026-93616)
Check Point Management Servers - specific affected versions not disclosed in available data. Vulnerability enables unauthenticated arbitrary script execution.
criticalbug_reportVulnerabilityCheck Point Management Server zero-day exploited in targeted attacks
Check Point Security Management Server: R82.20 (no Jumbo Hotfix), R82.10 (Take ≤44), R82 (Take ≤126), R81.20 (Take ≤166), R81.10 (Take ≤190), and R81/R80.x (all end-of-support versions). The vulnerability affects the management server's web service.
criticalbug_reportVulnerabilityCheck Point Management Server zero-day exploited in the wild
Check Point Security Management Server, Multi-Domain Security Management Server, Log Server, Multi-Domain Log Server, and SmartEvent. Fixed in R82.20 Security Hotfix.
criticalbug_reportVulnerabilityCheck Point Management flaw allows unauthenticated remote code execution
Check Point Security Management Server and Log Server: R82.20 (all builds), R82.10 (Jumbo Hotfix Take ≤44), R82 (Take ≤126), R81.20 (Take ≤166), R81.10 (Take ≤190), and R81, R80.40, R80.30, R80.20, R80.10, R80 (end-of-support).
criticalbug_reportVulnerabilityCheck Point Security Management unauthenticated RCE requires immediate patching
Check Point Security Management servers. Specific affected versions not disclosed in available information. Vulnerability allows unauthenticated remote code execution.
criticalbug_reportVulnerabilityCheck Point VPN unauthenticated RCE requires immediate patching
Check Point VPN products (specific versions not disclosed in available data). Vulnerability allows unauthenticated remote code execution. No CVE assigned yet.
criticalbug_reportVulnerabilityCheck Point VPN critical flaws CVE-2026-85102/85103 face imminent exploit
Check Point VPN products. Specific affected versions not disclosed in available information. Both CVE-2026-85102 and CVE-2026-85103 are rated critical severity.
criticalbug_reportVulnerabilityCheck Point patches two 9.8 VPN certificate flaws allowing unauthenticated RCE
Check Point Quantum Security Gateway, Security Management Server, and Spark Firewall. Affected versions: R82.10 (Jumbo Hotfix Take 43 or below), R82 (Take 125 or below), R81.20 (Take 165 or below). Spark Firewall versions not specified.
criticalbug_reportVulnerabilityCheck Point VPN flaws allow unauthenticated RCE on gateways and mgmt servers
Check Point Security Gateway, Security Management Server, and Spark Firewall (all versions R80 through R82.10) configured with Remote Access VPN or Site-to-Site VPN.
criticalbug_reportVulnerabilityCheck Point SmartConsole auth bypass exploited; PoC public
Check Point Security Management Server and Multi-Domain Security Management Server (MDS) SmartConsole. All versions prior to Jumbo Hotfixes released July 22, 2026.
criticalbug_reportVulnerabilityCheck Point privilege escalation flaws under active exploitation
Check Point products (specific versions not disclosed in available data). Three privilege escalation vulnerabilities identified, including one actively exploited flaw enabling full admin authentication bypass.
criticalbug_reportVulnerabilityCheck Point SmartConsole auth bypass (CVE-2026-16232) exploited in wild
Check Point Security Management and Multi-Domain Management (MDSM) products: R77.30, R80, R80.10, R80.20, R80.30, R81, R81.10, R81.20, R82, R82.10. Affects SmartConsole login process when Management Server is exposed to internet without IP restrictio…
criticalbug_reportVulnerabilityCheck Point VPN authentication flaw under active exploitation
Check Point VPN products with user authentication functionality. Specific affected versions not disclosed. CVE identifier not yet assigned.
criticalbug_reportVulnerabilityCheck Point VPN auth bypass under active exploit via IKEv1 flaw
Check Point Remote Access VPN and Mobile Access deployments using deprecated IKEv1 protocol. Specific product versions not disclosed. Does not affect IKEv2 configurations.
criticalbug_reportVulnerabilityCheck Point patches zero-day in VPN/Mobile Access exploited by Qilin
Check Point Remote Access VPN and Mobile Access deployments. Specific product versions not disclosed in summary; refer to vendor advisory for affected releases and patched versions.