LIVE FEED

Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiperHardening a Personal Linux Server in an AfternoonMicrosoft 365 outage disrupts Outlook, Teams, and Copilot worldwideCheck Point patches zero-day root escalation flaw exploited against customersHackers Compromise 4,800 GitHub Accounts to Steal Cloud CredentialsHow to Put a Self-Hosted Service Behind SSO and Intrusion Blocking in an AfternoonBaker Tilly notifies clients of data breach at third-party provider

Check Point CVEs

Every Check Point vulnerability SECBORN has reported on, with live CVSS severity, CISA known-exploited status and EPSS exploit odds.

10Tracked CVEs 6Known exploited 7Critical 9.0+ 3Covered this week

All Known exploited Critical High This week

7 CVEs EPSSCoverage

9.8CVSS 3.1 CVE-2026-85102 Exploited Improper Certificate Validation in Quantum Security Gateway Check Point · Multiple Products EPSS 54% 3 stories 21 hours ago 9.8CVSS 3.1 CVE-2026-93616 Exploited Directory Traversal and File upload allows execution of arbitrary script on the Management Server Check Point · Multiple Products EPSS 92% 1 story 21 hours ago 9.8CVSS 3.1 CVE-2026-91843 Stack overflow in login process to the Security Management and Log Servers Check Point · Quantum Security Management EPSS 0.52% 1 story 2 months ago 9.8CVSS 3.1 CVE-2026-85103 Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding Check Point · Quantum Security Gateway EPSS 4.3% 2 stories 2 months ago 9.3CVSS 4.0 CVE-2026-16232 Exploited Authentication Bypass in the SmartConsole Login Process Using an Application Token Check Point · SmartConsole EPSS 3.5% 2 stories 2 months ago 9.3CVSS 3.1 CVE-2026-50751 Exploited Ransomware User Authentication Bypass in VPN Remote Access and Mobile Access Check Point · Security Gateway EPSS 85% 3 stories 2 months ago 9.1CVSS 3.1 CVE-2026-62144 Management Authentication Bypass and Privilege Escalation Check Point · Quantum Security Management EPSS 1.0% 1 story 4 months ago

Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.