Check Point on PhllapsNET https://www.phllaps.net/tags/check-point/ Recent content in Check Point on PhllapsNET Hugo en-gb Tue, 22 Sep 2026 00:00:00 +0000 Check Point Multiple Products Improper Certificate Validation Vulnerability https://www.phllaps.net/posts/check-point-multiple-products-improper-certificate-validation-vulnerability/ Tue, 22 Sep 2026 00:00:00 +0000 https://www.phllaps.net/posts/check-point-multiple-products-improper-certificate-validation-vulnerability/ <div style="background:#b91c1c;color:white;padding:16px 18px;border-radius:14px;font-weight:800;font-size:18px;display:flex;align-items:center;gap:12px;box-shadow:0 10px 24px rgba(0,0,0,0.18);"><span style="font-size:24px;">🚨</span><span>SEVERITY: CRITICAL — CVSS 9.8</span><span style="opacity:0.95;font-weight:700;margin-left:auto;">Security Advisory</span></div> <h2 id="tldr-">TL;DR 📌</h2> <ul> <li>Check Point Security Gateway and Check Point Spark Firewall using Site to Site VPN or Remote Access VPN contain an improper certificate validation vulnerability which could allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.</li> <li>Highest CVSS: <strong>9.8 (Critical)</strong>.</li> <li><strong>Listed in CISA KEV</strong> (2026-09-22) — this is being exploited in the wild.</li> <li><strong>Check the advisory for fixed releases</strong> — remediation detail is in the vendor link below.</li> <li>CVEs: CVE-2026-85102.</li> </ul> <h2 id="what-it-is">What it is</h2> <p>CVE-2026-85102 is an improper certificate validation flaw in Check Point Security Gateway and Check Point Spark Firewall, triggered during VPN negotiation. Both Site-to-Site VPN and Remote Access VPN configurations are affected.</p> Check Point Multiple Products Path Traversal Vulnerability https://www.phllaps.net/posts/check-point-multiple-products-path-traversal-vulnerability/ Tue, 22 Sep 2026 00:00:00 +0000 https://www.phllaps.net/posts/check-point-multiple-products-path-traversal-vulnerability/ <div style="background:#b91c1c;color:white;padding:16px 18px;border-radius:14px;font-weight:800;font-size:18px;display:flex;align-items:center;gap:12px;box-shadow:0 10px 24px rgba(0,0,0,0.18);"><span style="font-size:24px;">🚨</span><span>SEVERITY: CRITICAL — CVSS 9.8</span><span style="opacity:0.95;font-weight:700;margin-left:auto;">Security Advisory</span></div> <h2 id="tldr-">TL;DR 📌</h2> <ul> <li>Check Point Security Management Server, Multi-Domain Security Management Server, Log Server, Multi-Domain Log Server, and SmartEvent contain a path traversal vulnerability that allows an unauthenticated attacker to upload and execute arbitrary scripts.</li> <li>Highest CVSS: <strong>9.8 (Critical)</strong>.</li> <li><strong>Listed in CISA KEV</strong> (2026-09-22) — this is being exploited in the wild.</li> <li><strong>Check the advisory for fixed releases</strong> — remediation detail is in the vendor link below.</li> <li>CVEs: CVE-2026-93616.</li> </ul> <h2 id="what-it-is">What it is</h2> <p>CVE-2026-93616 is a path traversal vulnerability affecting several Check Point management components: Security Management Server, Multi-Domain Security Management Server, Log Server, Multi-Domain Log Server, and SmartEvent. It combines directory traversal with a file upload flaw, allowing an unauthenticated attacker to write arbitrary files outside the intended upload location and then have them executed as scripts.</p>