Check Point has two vulnerabilities that are being exploited in the wild, tracked as CVE-2026-85102 & CVE-2026-93616. The Cybersecurity and Infrastructure Security Agency (CISA) has added the vulnerabilities to its Known Exploited Vulnerabilities Catalog, urging users to patch before September 25, 2026. The vulnerability has a critical severity rating with a CVSS score of 9.8.
CISA Warns of Check Point Vulnerabilities Exploited in Attacks (CVE-2026-85102 & CVE-2026-93616)
About this summary. This is a short, independently written summary of an article first published by Qualys. Cyber Security News did not report or verify the underlying story. Read the original: https://threatprotect.qualys.com/2026/09/23/cisa-warns-of-check-point-vulnerabilities-exploited-in-attacks-cve-2026-85102-cve-2026-93616/
Source attribution: headline and facts are from Qualys (threatprotect.qualys.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
U.S. CISA adds Check Point, Arista VeloCloud Orchestrator, and F5 BIG-IP APM flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Check Point, Arista VeloCloud Orchestrator, and F5 BIG-IP APM flaws to its Known Exploited…
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
Attackers hit Check Point Management Servers and Spark firewalls, F5 BIG-IP APM instances
Check Point Software has released emergency fixes for a critical Check Point Management Server vulnerability (CVE-2026-93616) that has been exploited as far back as July…
Check Point Fixes a New Actively Exploited Critical Security Flaw
Check Point fixes an actively exploited flaw that lets unauthenticated attackers upload and run scripts on vulnerable Security Management Servers. Check Point has…
Check Point security advisory (AV26-902) – Update 1
Serial Number: AV26-902 Date: September 9, 2026 Updated: September 22, 2026 As of September 9, 2026, Check Point is affected by vulnerabilities in the following…
CISA Charts New "Quality Era" for Global CVE Program
CISA has set out a new framework to improve CVE data quality as vulnerability volumes rise