NCSC Warns of Critical Check Point VPN Security Vulnerabilities

The Dutch National Cyber Security Centre (NCSC) has issued a warning regarding the imminent exploitation of two critical security vulnerabilities in Check Point VPN. These vulnerabilities are registered under the CVE IDs CVE-2026-85102 and CVE-2026-85103. The agency emphasizes that the threat from cybercriminals is immediate, and companies should urgently take measures to protect their systems. The vulnerabilities allow attackers to gain unauthorized access to networks protected by Check Point VPN. According to NCSC, these flaws could be exploited to steal sensitive data or compromise systems.

The agency recommends that all users of Check Point VPN promptly update their systems and implement the recommended security measures. Check Point has already announced an update to address these security vulnerabilities, with the release expected in the coming days. Companies relying on Check Point VPN should ensure they have the latest security updates to minimize the risk of an attack. The NCSC warning comes at a time when cyberattacks on businesses worldwide are increasing.

Vulnerabilities in Check Point VPN are not the first of their kind discovered in recent months. Experts warn that attackers are becoming increasingly sophisticated, and companies must therefore take proactive measures to protect their networks. The vulnerabilities CVE-2026-85102 and CVE-2026-85103 have been classified as critical, indicating a high risk to security. The NCSC has stressed that exploiting these vulnerabilities could have severe consequences for affected companies, including financial losses and reputational damage. In addition to the recommended updates, the NCSC advises companies to review their security policies and ensure that all employees are aware of the risks of cyberattacks.

Cybersecurity awareness training could help identify and prevent potential attacks early. The NCSC has also pointed out that the threat of cybercrime is not limited to large companies. Small and medium-sized enterprises are also frequently targeted by attacks. Therefore, it is crucial that all organizations, regardless of size, take appropriate security precautions. The NCSC warning is another reminder of the need to take cybersecurity measures seriously.

The agency has emphasized that the responsibility for network security does not rest solely with IT departments but must also be borne by company management. A holistic approach to cybersecurity is essential. The vulnerabilities in Check Point VPN exemplify the challenges companies face in the digital age. The NCSC urges all affected users to act immediately to protect their systems. The exact number of affected systems is currently unknown; however, it is estimated that millions of users worldwide utilize Check Point VPN.

NCSC will continue to monitor the situation and plans to provide regular updates on developments regarding these security vulnerabilities. Companies should prepare for the release of the update from Check Point and ensure they take all necessary steps to secure their systems. The vulnerabilities CVE-2026-85102 and CVE-2026-85103 have been deemed particularly concerning by security experts, as they could potentially have far-reaching impacts on network security. The NCSC has underscored the urgency of the situation and calls on all users to remain vigilant. The release of the update to address these vulnerabilities is expected on September 15, 2026.