DUTCH NCSC WARNS OF IMMINENT CHECK POINT VPN ATTACKS

The NCSC identified two critical vulnerabilities tracked as CVE-2026-85102 and CVE-2026-85103 in Check Point VPN products. Both flaws pose significant security risks and have attracted attention from threat actors. The Dutch agency's warning indicates that active exploitation is likely to occur soon, placing organizations running vulnerable VPN infrastructure at immediate risk. Check Point VPN is widely deployed across enterprises and government agencies for secure remote access. Vulnerabilities in such systems can provide attackers with direct pathways into critical networks. Organizations using Check Point VPN products should prioritize patching efforts immediately. The NCSC recommends reviewing systems for signs of compromise and implementing additional security controls while updates are deployed. Further technical details regarding the vulnerabilities and available patches have been released through official security channels.