Exploitation attempts expected soon for two critical Check Point VPN flaws
SecurityUnverifiedUpdated:
The Dutch NCSC has reportedly warned that exploitation attempts against two critical Check Point VPN flaws are expected soon, despite no public proof-of-concept being reported.
NCSC reportedly rates exploitation likelihood and impact as high
BleepingComputer reports that the Dutch Nationaal Cyber Security Centrum (NCSC) assesses exploitation likelihood and potential impact as high for CVE-2026-85102 and CVE-2026-85103. The flaws reportedly enable remote code execution on affected Check Point Security Gateways; one can also affect Security Management Servers. Check Point issued fixes on September 9, the article says.
No public proof-of-concept exploit for the two flaws had been reported, according to the article.
The warning shifts the risk assessment from unpublicized exploit code to expected near-term exploitation attempts.
A warning of imminent attempts
Check Point VPN provides encrypted remote access to internal business networks. The report warns of risk across multiple supported and end-of-support releases, while describing R82.20 as unaffected.
Sources
- BleepingComputerDutch NCSC: Critical Check Point VPN flaws exploitation is imminentRead source →