Check Point warns of hackers exploiting Security Gateway VPN RCE flaw

Check Point confirmed active exploitation of CVE-2026-85102, a pre-authentication remote code execution vulnerability in the VPN certificate-handling functionality of its Security Gateway product. The flaw allows attackers to execute arbitrary code without credentials. Check Point urged customers to apply patches immediately, as proof-of-concept exploits are circulating in the wild.