Check Point confirms active exploitation of CVE-2026-85102 and CVE-2026-93616, two critical CVSS 9.8 vulnerabilities affecting Security Gateway, Spark Firewall and Security Management infrastructure.

TL;DR Security teams observed active attacks against an unpatched flaw in enterprise gateways. This critical Check Point VPN vulnerability allows unauthenticated attackers to execute arbitrary code remotely. Check Point confirmed that adversaries are actively attempting to compromise enterprise networks in the wild. Why It Matters This security flaw poses an urgent danger to global enterprise perimeters. Check Point released an urgent security advisory warning customers about live intrusion attempts.

Check Point released emergency security updates on September 9, 2026, to address two critical-severity flaws. These critical Check Point VPN vulnerabilities allow unauthenticated attackers to achieve remote code execution. Security teams discovered the issues internally, and no active in-the-wild exploitation currently exists. Why This Threat Matters Industry estimates show Check Point secures more than 100,000 organizations worldwide. Network security appliances serve as the primary defensive barrier against perimeter incursions.