CPAI-2026-0628

Advisories.Checkpoint • February 1, 2026

This protection detects attempts to exploit this vulnerability. In order for the protection to be activated, update your Security Gateway product to the latest IPS update. For information on how to update IPS, go to SBP-2006-05 , click on Protection tab and select the version of your choice.

In the IPS tab, click Protections and find the Oracle Servers Remote Code Execution protection using the tool and Edit the protection's settings. Install policy on all Security Gateways.

This protection's log will contain the following information: Attack Name: Web Server Enforcement Violation. Attack Information: Oracle Servers Remote Code Execution

Attack Name: Web Server Enforcement Violation. Attack Information: Oracle Servers Remote Code Execution

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Remote Code Execution Vulnerabilities in Security Gateways Two vulnerabilities affecting Security Gateway products have been identified. The first, CVE-2024-37149, was published on July 10, 2024, and relates to GLPI Remote Code Execution. The second vulnerability, associated with Oracle Servers, was detailed in an advisory on February 1, 2026, requiring updates to activate protections. 2 sources 31

CPAI-2026-0628

The full story

Extracted Entities

Attack Types (1)

Platforms (2)