> TritonInfoSec News
Home / Sep 11, 2026 / Story
0
#5 The Hacker News general September 10, 2026 at 11:45 UTC

Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE

By [email protected] (The Hacker News)

AI Summary

Check Point disclosed two critical vulnerabilities rated CVSS 9.8 in its Security Gateway firewall appliances and Security Management products, both related to VPN certificate handling and enabling unauthenticated remote code execution under unspecified 'specific conditions.' The vulnerabilities affect widely deployed Check Point perimeter security infrastructure, and the vendor's refusal to detail the triggering conditions limits defenders' ability to assess exposure. Organizations using Check Point Security Gateways should apply the available patches immediately given the RCE severity and unauthenticated attack vector.

Read full article → https://thehackernews.com/2026/09/check-point-disc…

Relevance score: 84.0/100

# More from September 11

  1. 1
    Cisco FMC flaws exploited by ransomware gang, state-sponsored hackers BleepingComputer
  2. 2
    PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances The Hacker News
  3. 3
    New 'BlueMoon' kit exploited Windows and Chrome zero-day flaws BleepingComputer
  4. 4
    New ‘ShieldCrash’ Zero-Day Exploit Targets Microsoft Defender SecurityWeek
  5. 6
    CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline The Hacker News
  6. 7
    AI lets small actors run state-level hacking campaigns, Anthropic report finds CyberScoop
  7. 8
    IDScan confirms breach tied to 153 million stolen driver’s licenses BleepingComputer
  8. 9
    Anthropic Discloses Fourth AI Hacking Incident Involving Claude Opus 4.6 The Hacker News
  9. 10
    US says Chinese firms extracted billions of tokens from frontier AI models BleepingComputer