(truesec.com) Critical Check Point Vulnerabilities Under Active Exploitation: CVE-2026-85102 and CVE-2026-93616 In brief - This article details a security advisory from Check Point regarding two critical, actively exploited vulnerabilities affecting their Security Gateway and Security Management products. Technically - This article describes CVE-2026-85102, a pre-authentication remote code execution (RCE) vulnerability in Security Gateway VPN certificate handling affecting various R81 and R82 versions, and CVE-2026-93616, a pre-authentication path traversal vulnerability in Security Management that allows for arbitrary script execution and Java class loading. Exploitation of CVE-2026-85102 has been observed globally via anonymization infrastructure using specific certificate subjects (e.g., CN=vpn, OU=users, O=global), while CVE-2026-93616 was used in limited targeted attacks. Source: https://www.truesec.com/hub/blog/check-point-security-gateway-security-management-cve-2026-85102-cve-2026-93616 #Cybersecurity