{"apiVersion":"1","notice":"Security Threat Pulse API v1. Free, no key. Facts with sources; verdicts follow the published rules at https://securitythreatpulse.com/methodology. Not advice. Some source data is withheld here until its terms allow re-serving.","generatedAt":"2026-11-11T08:30:30.152Z","products":["checkpoint"],"actNowTotal":1,"results":[{"query":"checkpoint","matched":1,"actNow":1,"events":[{"id":"kev-2026-09-22-check-point-multiple-products","url":"https://securitythreatpulse.com/events/kev-2026-09-22-check-point-multiple-products","title":"Several Check Point products: 2 flaws used in attacks; attackers can run their own code","verdict":"act_now","verdictReason":"Attacks are confirmed. The vulnerability is 49 days old, so many systems are likely still unpatched. Ready-made attack tools are public. The severity score is critical (9.8). The exploit prediction score is 92%.","tier":"now","rankScore":7,"rankWhy":["Exploitation is confirmed by an authoritative source.","The product faces the internet or gives remote access.","Ready-made attack tools are public.","3 products are affected."],"rulesVersion":"v3","ladder":{"talk":"reported","damage":"none","attempts":"confirmed","exposure":"none","exploited":"confirmed"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2026-85102","CVE-2026-93616"],"vendor":"Check Point","product":"Multiple Products","affectedProducts":[{"kind":"direct","slug":"checkpoint/multipleproducts","vendor":"Check Point","product":"Multiple Products","evidence":["kev"],"vendorKey":"checkpoint","productKey":"multipleproducts"},{"kind":"direct","slug":"checkpoint/quantumsecuritygateway","vendor":"Check Point","product":"Quantum Security Gateway","evidence":["cpe"],"vendorKey":"checkpoint","productKey":"quantumsecuritygateway"},{"kind":"direct","slug":"checkpoint/quantumsecuritymanagement","vendor":"Check Point","product":"Quantum Security Management","evidence":["cpe"],"vendorKey":"checkpoint","productKey":"quantumsecuritymanagement"}],"category":{"id":"edge","label":"VPN, firewall or gateway","why":"It sits at the edge of your network and faces the internet, so attackers can reach it directly.","doThis":"If you have it, patch it today. If you cannot, block access to it from the internet until you can."},"summary":"Check Point Security Gateway and Check Point Spark Firewall using Site to Site VPN or Remote Access VPN contain an improper certificate validation vulnerability which could allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.","cvss":9.8,"epss":0.91605,"exploitMaturity":"weaponized","kevListed":true,"kevDateAdded":"2026-09-22","kevDueDate":"2026-09-25","firstSeenAt":"2026-09-22T00:00:00.000Z","updatedAt":"2026-11-10T13:00:06.454Z","newestEvidenceAt":"2026-11-02T23:21:20.073Z"}]}]}