Check Point warns of hackers exploiting Security Gateway VPN RCE flaw
Teaser from the source
Cybersecurity company Check Point has confirmed active exploitation of CVE-2026-85102, a pre-authentication remote code execution (RCE) vulnerability in the VPN certificate-handling functionality of its Security Gateway product. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerLinked advisories
- CVE-2026-85102Check Point Security Gateway: unzureichende Zertifikatvalidierung
- CVE-2026-85102Check Point Multiple Products — Check Point Multiple Products Improper Certificate Validation Vulnerability
- CVE-2026-85102Security Advisory 2026-012 — Critical Vulnerabilities in Check Point Products
- CVE-2026-85102Check Point Security Gateway, Spark Firewall und Security Management: Mehrere Schwachstellen ermöglichen Codeausführung
Affected vendors and products
More on exploiting
Other advisories
- CriticalCVE-2026-22313The device has a webserver that exposes a REST API authenticated with a token on the management network. By exploiting an OS command injection vulnerability …
- MediumCVE-2022-41656Missing Authorization vulnerability in Bizswoop Account Manager for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.
- MediumCVE-2026-49054Missing Authorization vulnerability in Mamunur Rashid The Post Grid allows Exploiting Incorrectly Configured Access Control Security Levels.
- HighCVE-2026-48545Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a s…
- MediumCVE-2026-49053Missing Authorization vulnerability in Wpmet ElementsKit Elementor addons Lite allows Exploiting Incorrectly Configured Access Control Security Levels.
- MediumCVE-2026-49052Missing Authorization vulnerability in Wpmet ElementsKit Elementor addons Lite allows Exploiting Incorrectly Configured Access Control Security Levels.
- MediumCVE-2026-49051Missing Authorization vulnerability in Prasad Kirpekar WP Meta and Date Remover allows Exploiting Incorrectly Configured Access Control Security Levels.
- MediumCVE-2026-49047Missing Authorization vulnerability in DearHive DearFlip allows Exploiting Incorrectly Configured Access Control Security Levels.
Other news entries
- CISA says max severity GitLab flaw now exploited in the wildNewsBleepingComputer
- Drupal warns of critical Commerce Core flaw exploited in attacksNewsBleepingComputer
- Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass FlawNewsThe Hacker News
- Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malwareNewsBleepingComputer
- Google's Gemini 4 Carbon Leads Benchmarks for Finding, Exploiting, and Patching VulnerabilitiesNewsThe Hacker News
- Fake Anthropic AI previews lure in overeager employeesEventCSO Online
- New Cisco firewall zero-day exploited to crash SSL VPN devicesNewsBleepingComputer
- Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management InterfacesNewsThe Hacker News
ID