certeu-2026-012
certeu
Description
On 9 September 2026, Check Point released emergency security updates addressing two critical vulnerabilities affecting Check Point Security Gateway, Security Management Server, and Spark Firewall deployments configured to use Remote Access VPN or Site-to-Site VPN. Both vulnerabilities carry a CVSS score of 9.8 and could allow an unauthenticated, remote attacker to execute arbitrary code on affected appliances.<br> CERT-EU strongly recommends applying the available hotfixes as soon as possible, prioritising internet-facing and perimeter appliances.<br>
Timeline
- Published
- Thu, 10 Sep 2026 10:20:06 CEST
- Last Modified
- Thu, 10 Sep 2026 10:20:06 CEST
CVSS Details
CVSS details not available.
Affected Products
No product information available.
References
No references available.
Linked Vulnerabilities
No linked vulnerabilities found.
{
"datePublished": "Thu, 10 Sep 2026 10:20:06 CEST",
"description": "On 9 September 2026, Check Point released emergency security updates addressing two critical vulnerabilities affecting Check Point Security Gateway, Security Management Server, and Spark Firewall deployments configured to use Remote Access VPN or Site-to-Site VPN. Both vulnerabilities carry a CVSS score of 9.8 and could allow an unauthenticated, remote attacker to execute arbitrary code on affected appliances.<br>\nCERT-EU strongly recommends applying the available hotfixes as soon as possible, prioritising internet-facing and perimeter appliances.<br>",
"id": "CERTEU-2026-012",
"link": "https://cert.europa.eu/publications/security-advisories/2026-012/",
"source": "certeu",
"title": "2026-012: Critical Vulnerabilities in Check Point Products"
}