Check Point Multiple Products Improper Certificate Validation Vulnerability

A critical improper certificate validation vulnerability has been identified in Check Point Security Gateway and Check Point Spark Firewall products. The flaw affects configurations using Site to Site VPN or Remote Access VPN. An unauthenticated remote attacker could exploit this vulnerability to execute arbitrary code on the affected Gateway. The vulnerability is tracked as CVE-2026-85102 and has been listed by CISA. It is subject to BOD 26-04, which prioritizes security updates based on risk. Forensic triage requirements have also been outlined under CISA implementation guidance. Organizations using affected Check Point products should apply vendor patches immediately.