<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Patchfirst: Check Point vulnerabilities</title><link>https://patchfirst.co/vendor/check-point/</link><atom:link href="https://patchfirst.co/feed/vendor/check-point.xml" rel="self" type="application/rss+xml"/><description>New and newly exploited Check Point CVEs, with CISA KEV, EPSS and ATT&amp;CK context. Newest 50 by publication or KEV listing.</description><language>en-gb</language><ttl>360</ttl><lastBuildDate>Sat, 31 Oct 2026 05:11:25 GMT</lastBuildDate><item><title>[KEV] CVE-2026-93616: Check Point Multiple Products Path Traversal Vulnerability</title><link>https://patchfirst.co/cve/CVE-2026-93616/</link><guid isPermaLink="false">CVE-2026-93616#kev</guid><pubDate>Tue, 22 Sep 2026 00:00:00 GMT</pubDate><description>Check Point · Multiple Products. In CISA KEV since 2026-09-22. ENISA EUVD lists it as exploited. EPSS 91.6% (higher than 99.81% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&amp;CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.8 of 100.</description><category>kev</category><category>public-exploit</category><category>T1190</category><category>T1059</category></item><item><title>[KEV] CVE-2026-85102: Check Point Multiple Products Improper Certificate Validation Vulnerability</title><link>https://patchfirst.co/cve/CVE-2026-85102/</link><guid isPermaLink="false">CVE-2026-85102#kev</guid><pubDate>Tue, 22 Sep 2026 00:00:00 GMT</pubDate><description>Check Point · Multiple Products. In CISA KEV since 2026-09-22. ENISA EUVD lists it as exploited. EPSS 54.1% (higher than 99.01% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&amp;CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.7 of 100.</description><category>kev</category><category>public-exploit</category><category>T1190</category><category>T1059</category></item><item><title>CVE-2026-85103: Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding</title><link>https://patchfirst.co/cve/CVE-2026-85103/</link><guid isPermaLink="false">CVE-2026-85103</guid><pubDate>Wed, 09 Sep 2026 00:00:00 GMT</pubDate><description>checkpoint · Quantum Security Gateway. Not in CISA KEV. ENISA EUVD lists it as exploited. EPSS 4.3% (higher than 91.1% of CVEs). CVSS 9.8 CRITICAL. Priority 28.0 of 100.</description></item><item><title>[KEV] CVE-2026-16232: Check Point SmartConsole Improper Authentication Vulnerability</title><link>https://patchfirst.co/cve/CVE-2026-16232/</link><guid isPermaLink="false">CVE-2026-16232#kev</guid><pubDate>Wed, 22 Jul 2026 00:00:00 GMT</pubDate><description>Check Point · SmartConsole. In CISA KEV since 2026-07-22. ENISA EUVD lists it as exploited. EPSS 3.5% (higher than 89.2% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&amp;CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts. Named in 1 threat report. Priority 76.6 of 100.</description><category>kev</category><category>public-exploit</category><category>T1190</category><category>T1078</category></item><item><title>[KEV] CVE-2026-50751: Check Point Security Gateway Improper Authentication Vulnerability</title><link>https://patchfirst.co/cve/CVE-2026-50751/</link><guid isPermaLink="false">CVE-2026-50751#kev</guid><pubDate>Mon, 08 Jun 2026 00:00:00 GMT</pubDate><description>Check Point · Security Gateway. In CISA KEV since 2026-06-08, known ransomware use. ENISA EUVD lists it as exploited. EPSS 85.3% (higher than 99.72% of CVEs). CVSS 9.3 CRITICAL. Public exploit code exists. ATT&amp;CK: T1133 External Remote Services; T1078 Valid Accounts. Priority 84.5 of 100.</description><category>kev</category><category>ransomware</category><category>public-exploit</category><category>T1133</category><category>T1078</category></item><item><title>CVE-2026-50752: Certificate Validation Bypass in VPN Site-to-Site Connections Using IKEv1</title><link>https://patchfirst.co/cve/CVE-2026-50752/</link><guid isPermaLink="false">CVE-2026-50752</guid><pubDate>Mon, 08 Jun 2026 00:00:00 GMT</pubDate><description>checkpoint · Quantum Security Gateway. Not in CISA KEV. EPSS 5.0% (higher than 92.2% of CVEs). CVSS 7.4 HIGH. Priority 81.5 of 100.</description></item><item><title>[KEV] CVE-2024-24919: Check Point Quantum Security Gateways Information Disclosure Vulnerability</title><link>https://patchfirst.co/cve/CVE-2024-24919/</link><guid isPermaLink="false">CVE-2024-24919#kev</guid><pubDate>Thu, 30 May 2024 00:00:00 GMT</pubDate><description>Check Point · Quantum Security Gateways. In CISA KEV since 2024-05-30, known ransomware use. ENISA EUVD lists it as exploited. EPSS &gt;99.9% (higher than 99.98% of CVEs). CVSS 8.6 HIGH. Public exploit code exists. ATT&amp;CK: T1202 Indirect Command Execution; T1005 Data from Local System; T1003.003 NTDS; T1003.008 /etc/passwd and /etc/shadow; T1059.004 Unix Shell. Priority 79.0 of 100.</description><category>kev</category><category>ransomware</category><category>public-exploit</category><category>T1202</category><category>T1005</category><category>T1003.003</category><category>T1003.008</category><category>T1059.004</category></item></channel></rss>