Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE

Check Point has patched two critical vulnerabilities in the way its firewall and management products handle VPN certificates. The company says both could allow an unauthenticated remote attacker to run code, but only "under specific conditions" that it has not described. One flaw affects Check Point's Security Gateways, its firewall appliances. The other affects those gateways and the Security

Report facts: Check Point disclosed and patched two critical (CVSS 9.8) vulnerabilities in how its firewall and management products process VPN certificates, enabling unauthenticated remote code execution under specific, undisclosed conditions. One flaw impacts Security Gateways firewall appliances, while the other impacts both those gateways and related management products. RealGround analysis: Although not AI-specific, these issues highlight systemic risks in the software and network security supply chain that can indirectly compromise AI infrastructure and data if such VPN and gateway products are part of an organization's AI environment. Organizations should treat this as a trigger to review third‑party security product dependencies, update SBOMs, and validate patch management and remote access controls across systems that host or connect to AI workloads.