CVE-2026-85102

Check Point firewalls with improper certificate validation allowed unauthenticated remote attackers to execute arbitrary code.

Check Point Security Gateway and Spark Firewall products suffered from an improper certificate validation flaw enabling remote code execution without authentication. DIB organizations must ensure these products are patched immediately, as the vulnerability is actively exploited in the wild and represents a severe compliance risk under NIST 800-171 for unpatched, exploitable flaws.

Shame score — A critical RCE flaw in a leading security vendor's own products was actively exploited in the wild, demonstrating severe negligence and a failure to protect the very systems meant to secure networks.