CVE-2026-85102

Exploited Check Point VPN Vulnerability Hit in the Wild Diagram of the exploited Check Point VPN vulnerability affecting gateways

Exploited Check Point VPN Vulnerability Hit in the Wild

Do Son September 22, 2026

TL;DR Security teams observed active attacks against an unpatched flaw in enterprise gateways. This critical Check Point...

CVE-2026-85102 & 85103: Check Point VPN Flaws 9.8 CVSS RCE Diagram showing critical Check Point VPN vulnerabilities CVE-2026-85102 and CVE-2026-85103

Diagram showing critical Check Point VPN vulnerabilities CVE-2026-85102 and CVE-2026-85103

CVE-2026-85102 & 85103: Check Point VPN Flaws 9.8 CVSS RCE

Do Son September 9, 2026

Check Point released emergency security updates on September 9, 2026, to address two critical-severity flaws. These critical...

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2026-86950CVSS 8.8
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and...
Admin intelCISA KEV📅 Added to KEV: Sep 29, 2026📅 Updated: Sep 29, 2026
CVE-2026-88772
Memory overflow vulnerability leading to remote code execution or denial of service.
Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
CVE-2026-88771
Remote code execution due to improper input validation that can allow an unauthenticated attacker to execute arbitrary commands.
Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
CVE-2026-65660CVSS 8.8
Improper control of generation of code (\'code injection\') in Microsoft Office SharePoint allows an authorized attacker to execute...
Admin intelCISA KEV📅 Added to KEV: Sep 25, 2026📅 Updated: Sep 25, 2026
CVE-2026-5430CVSS 10.0
The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows...
CISA KEV📅 Added to KEV: Sep 24, 2026
CVE-2026-71362CVSS 9.1
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could...
CISA KEV📅 Added to KEV: Sep 24, 2026
CVE-2026-48842CVSS 8.1
Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via...
Admin intel📅 Updated: Sep 23, 2026
CVE-2026-87902
Unauthenticated path traversal in page-template resolution leading to conditional RCE An unauthenticated attacker can make get_page_template() page-template resolution...
Admin intelCISA KEV📅 Added to KEV: Sep 25, 2026📅 Updated: Sep 23, 2026

CVE-2026-84411CVSS 9.8
The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling...
Admin intel📅 Updated: Sep 29, 2026
CVE-2026-69854CVSS 9.0
Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network.
📅 Updated: Sep 29, 2026
CVE-2026-102334CVSS 9.1
Nginx Proxy Manager through 2.16.0 lacks rate-limiting on authentication endpoints, allowing unauthenticated attackers to make unlimited password guesses...
📅 Updated: Sep 29, 2026
CVE-2026-101260CVSS 9.4
A vulnerability was detected in Ziroom ZHOME A0101 1.0.1.0. Affected by this issue is some unknown functionality of...
📅 Updated: Sep 29, 2026
CVE-2026-68954CVSS 9.0
The "pattern" parameter used in search function in the home page of the TMS application is vulnerable to...
Admin intel📅 Updated: Sep 29, 2026
CVE-2026-68068CVSS 9.0
The "screenID" parameter in the electronic transaction queue viewer feature within the manual transactions section is susceptible to...
Admin intel📅 Updated: Sep 29, 2026
CVE-2026-72507CVSS 9.0
The "reportType" parameter in the product summary report feature within the balancing reports section is susceptible to a...
Admin intel📅 Updated: Sep 29, 2026
CVE-2026-71379CVSS 10.0
The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST...
Admin intel📅 Updated: Sep 29, 2026