Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE

2026-09-10T13:24:02Zefe839614fee9ff6d3666a6eb909538e4ee394cb246bb885631ed0995099fb56
CVE-2026-20079CVE-2026-44756CVE-2026-69414CVE-2026-86218CVE-2026-87491CISA-KEVactive-exploitationandroid-malwareaptcloud-and-ai-securitycredential-theftcryptocurrencycybercrimefinancial-sectorfirewallsinfostealermalwarenetwork-appliancesransomware-and-intrusionremote-code-executionsupply-chainunauthenticated-rcevpnvulnerabilitiesweb-shellzero-day

What happened

The feed reports widespread critical security activity, including actively exploited zero-days, unauthenticated remote-code-execution flaws, exposed administrative credentials, malware targeting network appliances and financial systems, and increasingly autonomous AI-assisted attacks. Key items include Check Point VPN certificate flaws, exploited Cisco/Citrix/Fortinet and N-able vulnerabilities, Chrome V8 and Microsoft Windows zero-days, SAP and cPanel RCE issues, PaperCut exploitation, credential and AI-token theft, Android banking malware, and attacks against cryptocurrency infrastructure.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
the_hacker_news
Record identifier
efe839614fee9ff6d3666a6eb909538e4ee394cb246bb885631ed0995099fb56
Enrichment time
2026-09-10T13:24:02Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

Record · Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE · Baitaphish