Check Point Patches Two Critical VPN Certificate Vulnerabilities Rated 9.8

Check Point Software Technologies has patched two critical vulnerabilities in the way its firewall and management products handle VPN certificates. The vulnerabilities, identified as CVE-2026-23364 and CVE-2026-23365, affect Check Point Security Gateways and Management Software. Both flaws carry a CVSS score of 9.8 and could potentially allow an unauthenticated remote attacker to execute code on targeted systems.

The company has stated that successful exploitation is possible "under specific conditions," though it has not provided further details regarding the precise conditions required for exploitation. One flaw affects Security Gateways, the organization's firewall appliances. The other flaw affects both Security Gateways and Security Management Software.

Check Point has released security updates addressing these issues. The vendor advises customers to apply the latest firmware and software versions as outlined in the official advisory to mitigate the risks. As of the advisory release, no public exploitation of these vulnerabilities has been reported, though the conditional nature of the flaws warrants prompt attention from affected organizations.