Kwetsbaarheden verholpen in Check Point VPN-producten

Check Point has patched two critical vulnerabilities (CVE-2026-85102 and CVE-2026-85103, both CVSS 9.8) in Quantum Security Gateway and Security Management products. CVE-2026-85102 involves improper certificate trust validation during VPN negotiation, allowing unauthenticated remote attackers to bypass authentication and execute arbitrary code. CVE-2026-85103 is a heap-based buffer overflow in ASN.1-decoding of VPN certificates, also enabling unauthenticated remote code execution. Both affect Security Gateway and Check Point Spark Firewall when Site-to-Site VPN or Remote Access VPN is enabled. Active exploitation of CVE-2026-85102 has already been observed in the wild. NCSC warns of imminent large-scale exploitation attempts and urges organizations to apply patches immediately. A partial mitigation for Site-to-Site VPN involves disabling implied VPN rules and restricting UDP/500 and UDP/4500 to specific peer IPs.