Cybersecurity leader Check Point has deployed crucial patches to address two high-risk vulnerabilities identified in its VPN-enabled gateway and firewall products. These vulnerabilities, known as CVE-2026-85102 and CVE-2026-85103, both hold a critical CVSS rating of 9.8, indicating their potential for serious security breaches if left unpatched.
Details of the Vulnerabilities
The vulnerabilities pose a significant risk as they could allow unauthorized remote code execution. CVE-2026-85102 stems from inadequate validation of certificate data during VPN negotiation, while CVE-2026-85103 involves a heap overflow issue in the VPN certificate ASN.1 decoding process. These flaws affect various Check Point products, including the Security Gateway, Spark Firewall, and Security Management Server.
Check Point has released security updates for product versions R82.10, R82, and R81.20. Users are strongly encouraged to install these updates to safeguard their systems against potential exploits.
Mitigation Strategies and Recommendations
For those using Site to Site VPN, Check Point advises disabling implied rules and manually defining VPN access rules specifically for UDP/500 and UDP/4500, targeting specific peer IP addresses. However, this mitigation strategy is not applicable to locally managed Spark Firewall instances.
Customers managing Spark Firewall instances locally are urged to apply the latest Jumbo hotfixes without delay. Those with Check Point LivePatch enabled will receive the necessary patches automatically, ensuring continuous protection against these vulnerabilities.
Discovery and Preventive Measures
Check Point discovered these vulnerabilities internally and confirms that there has been no evidence of them being exploited in real-world scenarios. This proactive approach highlights the company’s commitment to maintaining robust security measures.
Earlier this year, Check Point also alerted its users about two zero-day vulnerabilities, CVE-2026-16232 and CVE-2026-50751, underscoring the ongoing threats facing network security. The swift action to patch these new vulnerabilities further emphasizes the importance of timely updates in preventing cyber threats.
As cyber threats continue to evolve, staying informed about potential security risks and applying necessary patches remain critical components in safeguarding digital infrastructure.
