Check Point warns of hackers exploiting Security Gateway VPN RCE flaw

By Bill Toulas

AI Summary

Check Point confirmed active exploitation of CVE-2026-85102, a critical pre-authentication RCE vulnerability in its Security Gateway product's VPN certificate-handling functionality. The flaw enables remote attackers to execute code without authentication, and Check Point has issued patches alongside a warning urging immediate action. Organizations using Check Point Security Gateway for VPN should prioritize patching given confirmed in-the-wild exploitation.

Read full article → https://www.bleepingcomputer.com/news/security/che…

Relevance score: 81.0/100

# More from September 24

1
F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers The Hacker News
2
ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants The Hacker News
3
Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks The Hacker News
4
Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware The Hacker News
5
Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises The Hacker News
6
MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key The Hacker News
7
Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape The Hacker News
8
Malicious AI agents steal 600K credit cards, infect 100+ sites with skimmers BleepingComputer
10
Arista patches actively exploited VeloCloud Orchestrator zero-day BleepingComputer