Vendor Security Advisory
Check Point Revises Management Server RCE Advisory for Active Exploitation
09/19/2026
Check Point reports active exploitation of unauthenticated file upload and script execution on management and log servers. Restrict management access, apply the branch-specific hotfix, and investigate compromise; Firewall Appliance and Spark products are outside this scope.
Check Point Confirms Active Exploitation of VPN RCE CVE-2026-85102
09/09/2026
Check Point reports active exploitation of a pre-authentication VPN certificate-handling flaw. Match Security Gateway or Spark builds to the supported fix, preserve logs, and investigate suspicious Mobile Access logins separately from patch installation.
Palo Alto Updates GlobalProtect CVE-2026-0307 Fixed Builds
09/08/2026
Palo Alto revises GlobalProtect CVE-2026-0307 fixed builds. Update both clients and infrastructure, validate the paired fix, and retain evidence.