Check Point Fixes Two Critical Flaws in Gateway Software

Remote Code Execution Threatens Network Perimeters

Cybersecurity vendor Check Point released emergency updates on September 11, 2026, to address two severe security defects. These vulnerabilities affect the company’s gateway and firewall product lines. The flaws are tracked under specific identifiers in the Common Vulnerabilities and Exposures database. Attackers could leverage these weaknesses to execute arbitrary code remotely. This poses a significant risk to organizations relying on Check Point infrastructure for network protection.

The two identified issues carry the designations CVE-2026-85102 and CVE-2026-85103. Both were classified as critical severity by the vendor. This high rating indicates that exploitation is likely and the impact is severe. The vulnerabilities reside within the core components of the gateway and firewall systems. Because these devices often sit at the edge of corporate networks, they handle a vast amount of traffic. A breach here can allow attackers to bypass standard security controls entirely.

The primary danger lies in the ability for unauthenticated attackers to trigger remote code execution. This means a malicious actor does not need existing credentials to launch an attack. They can send specially crafted data packets to vulnerable gateways. Once processed, the system runs the attacker’s code with elevated privileges. This grants them full control over the affected device. From there, they can pivot into internal networks or steal sensitive data. The lack of authentication requirements makes these flaws particularly dangerous for internet-facing systems.

Why Do Critical Gateway Flaws Demand Immediate Action?

Check Point advised customers to apply the latest patches immediately. The update resolves both CVE-2026-85102 and CVE-2026-85103 simultaneously. Administrators should verify their versions against the release notes provided by the vendor. Temporary mitigations may exist, but patching remains the most effective solution. Organizations should prioritize these updates during their next maintenance window or sooner if possible.

Network gateways act as the digital front door for many enterprises. When these devices contain critical bugs, the entire perimeter becomes porous. Attackers constantly scan for known vulnerabilities to find easy entry points. The recent discovery highlights the ongoing challenge of maintaining secure software. Even reputable vendors like Check Point must issue urgent fixes. Users must stay vigilant and monitor security advisories closely. Delaying updates increases the window of opportunity for cybercriminals.

Frequently Asked Questions

The immediate consequence of ignoring these patches is potential compromise. Attackers could establish persistent access to internal resources. This might lead to data exfiltration or ransomware deployment. Looking ahead, organizations should review their patch management processes. Regular audits ensure that all gateway devices run current software. Proactive defense reduces the likelihood of successful exploitation.

Which specific products are affected by these new vulnerabilities? The flaws impact Check Point’s gateway and firewall products. Users of these specific hardware and software solutions should check their version numbers.

How severe are the risks associated with CVE-2026-85102? Both vulnerabilities are rated as critical severity. They allow for remote code execution without prior authentication. This makes them highly exploitable in real-world scenarios.