Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE
2026-09-10T13:24:02Z•efe839614fee9ff6d3666a6eb909538e4ee394cb246bb885631ed0995099fb56
CVE-2026-20079CVE-2026-44756CVE-2026-69414CVE-2026-86218CVE-2026-87491CISA-KEVactive-exploitationandroid-malwareaptcloud-and-ai-securitycredential-theftcryptocurrencycybercrimefinancial-sectorfirewallsinfostealermalwarenetwork-appliancesransomware-and-intrusionremote-code-executionsupply-chainunauthenticated-rcevpnvulnerabilitiesweb-shellzero-day
What happened
The feed reports widespread critical security activity, including actively exploited zero-days, unauthenticated remote-code-execution flaws, exposed administrative credentials, malware targeting network appliances and financial systems, and increasingly autonomous AI-assisted attacks. Key items include Check Point VPN certificate flaws, exploited Cisco/Citrix/Fortinet and N-able vulnerabilities, Chrome V8 and Microsoft Windows zero-days, SAP and cPanel RCE issues, PaperCut exploitation, credential and AI-token theft, Android banking malware, and attacks against cryptocurrency infrastructure.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- efe839614fee9ff6d3666a6eb909538e4ee394cb246bb885631ed0995099fb56
- Enrichment time
- 2026-09-10T13:24:02Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.