Critical Vulnerabilities in Check Point Products

# Critical Vulnerabilities in Check Point Products

https://gcdradar.vercel.app/incidents/critical-vulnerabilities-in-check-point-products · AIR-2026-1561 · closed 2026-11-10

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability): Critical vulnerabilities rated CVSS 9.8 with vendor patches available.
- Fix status: Patched
- First reported: 2026-10-27 (happened 2026-09-09)
- AI role: No AI role
- Products: Check Point Security Gateway, Security Management Server, Spark Firewall
- CVSS: 9.8

## Summary

Check Point released emergency security updates for critical vulnerabilities affecting Security Gateway, Security Management Server, and Spark Firewall deployments. The flaws could allow unauthenticated, remote attackers to execute arbitrary code.

## What to do

Apply the available hotfixes as soon as possible, prioritising internet-facing and perimeter appliances.

## Affected and fixed versions

- Affected: Check Point Security Gateway
- Affected: Security Management Server
- Affected: Spark Firewall

## Latest updates

- 2026-10-27: 2026-012: Critical Vulnerabilities in Check Point Products (https://cert.europa.eu/publications/security-advisories/2026-012)

## Sources

- 2026-10-27 CERT-EU: 2026-012: Critical Vulnerabilities in Check Point Products https://cert.europa.eu/publications/security-advisories/2026-012

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.