Alert GCSA-26214 - Vulnerabilita' critiche in prodotti Check Point

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

******************************************************************

   alert ID: GCSA-26214
       data: 11 settembre 2026
     titolo: Vulnerabilita' critiche in prodotti Check Point

******************************************************************

:: Descrizione del problema

   Check Point ha rilasciato aggiornamenti di sicurezza di emergenza
   che risolvono due vulnerabilita' "critiche" (punteggio CVSS 9,8),
   relative a Security Gateway, Security Management Server e Spark Firewall,
   se configurati per utilizzare Remote Access VPN o VPN Site-to-Site.

   Maggiori informazioni sono disponibili alla sezione "Riferimenti".


:: Prodotti interessati

   Security Gateway R80, R80.10, R80.20, R80.30, R80.40 (End of Support)
   Security Gateway R81, R81.10 (End of Support)
   Security Gateway R81.10.X
   Security Gateway R81.20
   Security Gateway R82
   Security Gateway R82.00.X
   Security Gateway R82.10
   Security Management Server - tutte le versioni sopra elencate
   Spark Firewall (gestito centralmente e localmente) - tutte le versioni sopra elencate

   N.B. per i prodotti in (End of Support) il vendor non rilascera' alcuna patch
   https://www.checkpoint.com/it/support-services/support-life-cycle-policy/


:: Impatto

   Bypass delle funzionalita' di sicurezza (SFB)
   Esecuzione remota di comandi o codice arbitrario (RCE)


:: Soluzioni

   Applicare gli aggiornamenti, seguendo le indicazioni pubblicate dal vendor.
   Installare il Jumbo Hotfix rilasciato il 9 settembre 2026.

   https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.20/R81.20/Take_166.htm
   https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.20/R81.20/Installation-Uninstall.htm

   https://sc1.checkpoint.com/documents/Jumbo_HFA/R82/R82.00/Take_126.htm
   https://sc1.checkpoint.com/documents/Jumbo_HFA/R82/R82.00/Installation-Uninstall.htm

   https://sc1.checkpoint.com/documents/Jumbo_HFA/R82.10/R82.10/R82.10-Take_44.htm
   https://sc1.checkpoint.com/documents/Jumbo_HFA/R82.10/R82.10/Installation-Uninstall.htm


:: Riferimenti

   Bollettini di sicurezza Check Point
   https://support.checkpoint.com/results/sk/sk1000117/
   https://support.checkpoint.com/results/sk/sk1000118/

   Check Point CheckMates
   https://community.checkpoint.com/t5/General-Topics/Action-Required-Critical-Security-Advisory-VPN-Vulnerabilities/td-p/281995

   The Hacker News
   https://thehackernews.com/2026/09/check-point-discloses-two-98-rated-vpn.html

   Mitre CVE
   https://www.cve.org/CVERecord?id=CVE-2026-85102
   https://www.cve.org/CVERecord?id=CVE-2026-85103


GARR CERT Security Alert - subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert

-----BEGIN PGP SIGNATURE-----

iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCaqPQXQAKCRDBnEyTZRJg
QqmnAJ9sazR13LadvJoBWMA0OZ3wueDX3wCcDIFp2h+DYUWPhRHx+FGGyIrLuro=
=0/Gy
-----END PGP SIGNATURE-----