Nationaal Cyber Security Centrum checkpoint · Kwetsbaarheden verholpen in Check Point VPN producten
Affects Nationaal Cyber Security Centrum checkpointSource GCVE Database
Not known to be exploited.
Data as of 10/25/2026, 16:58:57 UTC
Rated by Threat Radar · CVSS not yet scored by NVD
- EPSS
- 4.2% chance of exploitation in 30 days – higher than 91% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Exploitation evidence
Disclosed: evidence found.
CVE published 10 Sep 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wild: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 2026-10-25.
What to do
AI-suggested
The vendor has remediated these vulnerabilities as indicated by the advisory.
Description
Two critical vulnerabilities affecting Check Point VPN products have been addressed by the vendor. The vulnerabilities correspond to CWE-122 (Heap-based Buffer Overflow) and CWE-295 (Improper Certificate Validation). No CVSS score is provided, and no known exploits in the wild have been reported. The vendor has released fixes, but specific affected versions and patch details are not provided in the available data.
Impact
The vulnerabilities are classified as critical, indicating a high potential impact if exploited. Heap-based buffer overflow can lead to arbitrary code execution or denial of service, while improper certificate validation can allow man-in-the-middle attacks or unauthorized access. No evidence of active exploitation is reported.
Weaknesses
- CWE-122Heap-based Buffer Overflow (opens in a new tab)
Variant weaknessLikelihood of exploit: HighCWE Top 25 (2025): #16
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
- CWE-295Improper Certificate Validation (opens in a new tab)
Base weaknessOWASP Top 10 A07:2025: Authentication Failures (opens in a new tab)
The product does not validate, or incorrectly validates, a certificate.