Dutch NCSC Warns of Imminent Exploitation of Critical Check Point VPN Vulnerabilities

The Dutch Nationaal Cyber Security Centrum (NCSC) has issued an urgent advisory warning of imminent exploitation of two critical vulnerabilities in Check Point VPN solutions. Tracked as CVE-2026-85102 and CVE-2026-85103, the flaws pose a significant risk to organizations relying on these products for secure remote access. The NCSC warns that active exploitation could allow remote code execution or bypass of VPN security controls. While the specific technical details of the vulnerabilities remain under verification, the advisory emphasizes the critical nature of the risk. Check Point security teams are reportedly developing patches, and the NCSC recommends that organizations monitor official Check Point advisories and apply updates as they are released to mitigate the risk. The advisory covers Check Point VPN products globally. As of the advisory date, specific exploit code or active exploitation reports have not been publicly disclosed, but the NCSC's assessment indicates a high likelihood of imminent threat activity.