Critical Security Vulnerability Discovered in Check Point

A critical security vulnerability in Check Point's Security Management and Log Servers allows attackers to execute code with root privileges over the network without authentication. This flaw particularly affects the systems responsible for controlling firewall policies and administrator access. Check Point has classified the vulnerability as extremely serious and has taken immediate action. A patch has been provided through the LivePatch update channel to address the vulnerability. However, the company has no indications that the vulnerability has already been exploited.

The security vulnerability could potentially have far-reaching consequences for companies relying on the affected systems. Unauthorized access to the management servers could enable attackers to take control of network security policies and manipulate critical data. The vulnerability has not been assigned a specific CVE number, complicating the identification and management of the security issue. Companies are advised to promptly install the provided updates to protect their systems. Check Point has previously released several security updates to address similar vulnerabilities.

The response to this new threat demonstrates the company's commitment to the security of its products and those of its customers. IT security experts recommend regularly monitoring systems and ensuring that all security updates are installed in a timely manner. Implementing additional security measures, such as multi-factor authentication, can also help minimize the risk of unauthorized access. The discovery of this vulnerability comes at a time when cyberattacks on companies worldwide are increasing. According to a recent study, 70% of companies experienced at least one cyberattack in the past year, underscoring the urgency of security measures.

Check Point has announced that it will provide further information about the vulnerability and the corresponding security updates in the coming days. The security community will closely monitor developments to ensure that all affected systems are protected as quickly as possible. The vulnerability was disclosed on September 21, 2026, and companies should act immediately to secure their systems.