Check Point has reported active exploitation of two critical vulnerabilities, CVE-2026-85102 and CVE-2026-93616, both with a CVSS score of 9.8. These pre-authentication flaws affect Security Gateway and Security Management products, allowing for potential remote code execution. The vulnerabilities were detailed in Check Point’s latest Threat Intelligence Bulletin, highlighting the urgency for organizations to address these security risks.
Middle East Relevance
While the report does not specify any direct incidents in the UAE or broader Middle East region, the critical nature of these vulnerabilities suggests that organizations using affected Check Point products in the region should remain vigilant. Given the prevalence of cybersecurity threats globally, the potential for exploitation in local environments is significant, particularly for entities reliant on these security solutions.
Key Facts
- CVE-2026-85102 and CVE-2026-93616 are critical vulnerabilities with a CVSS score of 9.8.
- Both vulnerabilities allow for remote code execution in Security Gateway and Security Management products.
- Active exploitation of these vulnerabilities has been observed, necessitating immediate action from affected organizations.
- Fixes for both vulnerabilities are currently available from Check Point.
Technical Context
The vulnerabilities CVE-2026-85102 and CVE-2026-93616 are classified as pre-authentication flaws, meaning they can be exploited without prior authentication. This characteristic significantly increases the risk, as attackers can potentially execute arbitrary code remotely. The specific technical details regarding the exploitation methods and the exact versions affected were not disclosed in the report, but organizations are advised to apply the available patches promptly to mitigate risks.
Risk and Decision
Organizations utilizing Check Point Security Gateway and Security Management products must act swiftly to apply the available patches for CVE-2026-85102 and CVE-2026-93616. Failure to address these vulnerabilities could lead to unauthorized access and control over critical systems, resulting in operational disruptions and potential data breaches. Security teams should prioritize this update to safeguard their infrastructure against active exploitation.
Defensive Guidance
Security teams should immediately implement the patches provided by Check Point for CVE-2026-85102 and CVE-2026-93616. It is crucial to verify the applicability of these fixes across all affected systems and to monitor for any signs of exploitation attempts. Regular security assessments and updates to incident response plans should also be conducted to enhance overall security posture.
Source and evidence
The information in this article is based on the Check Point Threat Intelligence Bulletin, published on September 28, 2026. The report details the active exploitation of critical vulnerabilities and provides guidance on necessary actions for affected organizations.
CWME will continue tracking regional implications as more verified information becomes available.
Follow Cyber Warriors Middle East for further cybersecurity features, analysis and insights.
