Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent

The Dutch National Cyber Security Centre (NCSC) warns of imminent exploitation of two critical vulnerabilities in Check Point VPN solutions, tracked as CVE-2026-85102 and CVE-2026-85103. These flaws could allow remote attackers to execute arbitrary code on Security Gateways and Security Management Servers, potentially leading to full system compromise. Although no public proof-of-concept has been released, the NCSC assesses the risk as high and urges immediate patching. Affected versions include multiple releases from R80 through R82.10, with fixes available via updates and LivePatch.

AI-extracted · verify before operational use