Check Point Security Advisory Av26 902

Back www.cyber.gc.ca

Check Point Security Advisory Av26 902

www.cyber.gc.ca • September 10, 2026

Share: View original

As of September 9, 2026, Check Point is affected by vulnerabilities in the following products:

Security Gateway Multiple versions

Check Point Spark Firewall using Site to Site VPN or Remote Access VPN Multiple versions

Security Management Server Multiple versions

Check Point Spark Firewall Multiple versions

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

CVE-2026-85102 - Authentication Bypass and Remote Code Execution in Remote Access and Site-to-Site VPN

CVE-2026-85103 - ASN.1 decoding heap overflow leading to a remote code execution

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SonicWall SMA1000 Faces Critical Zero-Day Exploitation SonicWall disclosed two critical vulnerabilities in its SMA1000 series appliances, CVE-2026-83548 and CVE-2026-83549, which are being actively exploited. CVE-2026-83548 is a pre-authentication server-side request forgery (SSRF) vulnerability rated 10.0 on the CVSS scale, allowing unauthenticated attackers to access sensitive functionality. CVE-2026-83549 is a post-authentication OS command injection flaw rated 7.8, enabling attackers with admin access to execute arbitrary commands. Both vulnerabilities can be chained for unauthenticated remote code execution (RCE). Affected models include the SMA1000 series 6210, 7210, and 8200v, with SonicWall urging immediate patching to versions 12.4.3-03526 or 12.5.0-02952. The vulnerabilities were confirmed as being exploited in the wild as of September 1, 2026. Organizations are advised to review their systems for signs of compromise and reset credentials if any indicators are found. 123 sources 81

Extracted Entities

CVEs (2)

CVE-2026-85102 CVE-2026-85103

CWE Weaknesses (2)

CWE-122 - Heap-based Buffer Overflow CWE-287 - Improper Authentication

Platforms (3)

Security Gateway Security Management Server Spark Firewall