Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent

The Dutch Nationaal Cyber Security Centrum (NCSC) is warning that two critical flaws in Check Point VPN, tracked as CVE-2026-85102 and CVE-2026-85103, are being exploited and are likely to be used by attackers soon. These vulnerabilities are not yet identified as zero-days, meaning that patches and workarounds are available, but the NCSC emphasizes that immediate action is necessary to mitigate the risks. The flaws are considered critical and could allow attackers to perform remote code execution and access sensitive information. Check Point has released patches for its VPN products, and users are advised to update their systems as soon as possible.