CISA Warns of Check Point VPN and Management Flaws Exploited for Unauthenticated Code Execution

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two critical Check Point vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, warning that attackers are actively exploiting the flaws to gain unauthenticated remote code execution on affected security gateways and management infrastructure. The vulnerabilities, tracked as CVE-2026-85102 and CVE-2026-93616 , were added to the KEV catalog on September 22, 2026. Federal Civilian…