Plan
active
Check Point Patches Two CVSS 9.8 Unauthenticated RCE Flaws in VPN/Firewall Products
- Engineer — Plan: Two 9.8-rated unauthenticated RCE flaws in Check Point Security Gateways and management products warrant prompt patching, but no KEV listing, public PoC, or confirmed exploitation shifts this to planned rather than emergency action — schedule patching to the latest fixed releases within your next patch window.
- SOC/IR — Learn: No IOCs, TTPs, or exploitation details have been disclosed yet, so there is no actionable detection surface; monitor threat intel feeds for follow-on exploitation reports and be ready to sweep Check Point edge device logs if active attacks emerge.
- Leader — Plan: If Check Point firewalls or VPN gateways are in your estate, confirm engineering has inventoried affected appliances and scheduled patches — CVSS 9.8 perimeter RCE will attract attacker interest quickly even without current exploitation evidence.
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.