MSRXCheck Point vulnerabilities being exploited
4 Check Point flaws were confirmed exploited in the wild in the past 365 days, 1 used in ransomware, across 3 products: Multiple Products, Security Gateway, SmartConsole. If you run any of them, patch these first.
| Added | Exploited vulnerability | Fix by |
|---|---|---|
| 2026-09-22 | CVE-2026-93616 Multiple Products Check Point Multiple Products Path Traversal Vulnerability Check Point Security Management Server, Multi-Domain Security Management Server, Log Server, Multi-Domain Log Server, and SmartEvent contain a path traversal vulnerability that allows an unauthenticated attacker to upload and execute arbitrary scripts. | 2026-09-25 |
| 2026-09-22 | CVE-2026-85102 Multiple Products Check Point Multiple Products Improper Certificate Validation Vulnerability Check Point Security Gateway and Check Point Spark Firewall using Site to Site VPN or Remote Access VPN contain an improper certificate validation vulnerability which could allow an unauthenticated remote attacker to execute arbitrary code on the Gateway. | 2026-09-25 |
| 2026-07-22 | CVE-2026-16232 SmartConsole Check Point SmartConsole Improper Authentication Vulnerability Check Point SmartConsole contains an improper authentication vulnerability which could allow an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. | 2026-07-25 |
| 2026-06-08 | CVE-2026-50751 Security Gateway ransomwareCheck Point Security Gateway Improper Authentication Vulnerability Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password. | 2026-06-11 |
Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.