The National Cyber Security Centre (NCSC) warns of two serious vulnerabilities in Check Point VPN products. Due to the high risk of exploitation, organizations are advised to install security updates immediately and take additional measures.
Check Point VPN products are widely used to establish secure connections between networks and users. Organizations working with multiple locations or remote employees, in particular, rely on these products to protect their data and communications. However, the recently discovered vulnerabilities jeopardize this security. According to the NCSC, these vulnerabilities have received a CVSS score of 9.8. This means that both the risk of exploitation and the potential damage are very high.
Vulnerabilities
Vulnerability CVE-2026-85102 affects the process for establishing VPN connections. This allows an attacker to bypass security and execute their own code without login credentials. The second vulnerability, CVE-2026-85103, relates to errors in certificate processing. Here, too, an external attacker can execute malicious code on the system without an access code.
At this time, no public exploit code is available yet, but the NCSC expects that the rapid spread of exploitation will not be long in coming. There is a risk that malicious actors will attempt to infiltrate organizations that have not yet been updated on a large scale.
Recommended measures
If the vulnerabilities are not resolved, attackers can take full control of the system. This means that confidential company information can be accessed or modified, and the operation of the system can be disrupted. This can lead to serious operational and reputational damage.
Check Point has released security updates to address the issues. The NCSC recommends installing these updates immediately. Organizations using Site-to-Site VPN are advised to adjust VPN rules, such as disabling implied rules and restricting access to specific IP addresses. Those who are unsure about the version in use should consult their IT service provider for support.