#check-point
-
Check Point confirms attacks on VPN Security Gateway RCE flaw
The company reports active exploitation of a pre-authentication flaw, CVE-2026-85102, in its VPN certificate handling, alongside a second bug used as a zero-day since July.
-
Check Point warns of a management server zero-day used in targeted attacks
The vendor says a flaw in its Security Management Server was exploited as early as July 23 and shipped a fix on September 22. In parallel, attackers are probing Spark firewalls through a VPN flaw.
-
Critical Check Point Vulnerability Opens Root Access to Management Servers
Check Point has released security updates for CVE-2026-91843, a critical vulnerability that allows code execution with root privileges on Security Management Server and Log Server management systems.
-
Check Point Patches Two Critical Flaws in VPN Certificate Handling
Both holes carry a 9.8 rating and could, in theory, let an unauthenticated attacker execute code remotely — but the vendor won't spell out the “certain conditions.”
-
Microsoft Defender's Own Driver Turned into a Weapon Against Security Software
Check Point researchers have shown how Windows Defender's built-in bootstrap driver can be used for arbitrary kernel-level operations — up to and including wiping out Defender itself on a Windows 11 machine.
-
Check Point Patches SmartConsole Flaw That Granted Administrator Rights
The company has released updates for its Security Management and Multi-Domain Management products, fixing among other things a critical flaw that is already being used in real-world attacks.