Alert GCSA-26214 - Vulnerabilita' critiche in prodotti Check Point

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ****************************************************************** alert ID: GCSA-26214 data: 11 settembre 2026 titolo: Vulnerabilita' critiche in prodotti Check Point ****************************************************************** :: Descrizione del problema Check Point ha rilasciato aggiornamenti di sicurezza di emergenza che risolvono due vulnerabilita' "critiche" (punteggio CVSS 9,8), relative a Security Gateway, Security Management Server e Spark Firewall, se configurati per utilizzare Remote Access VPN o VPN Site-to-Site. Maggiori informazioni sono disponibili alla sezione "Riferimenti". :: Prodotti interessati Security Gateway R80, R80.10, R80.20, R80.30, R80.40 (End of Support) Security Gateway R81, R81.10 (End of Support) Security Gateway R81.10.X Security Gateway R81.20 Security Gateway R82 Security Gateway R82.00.X Security Gateway R82.10 Security Management Server - tutte le versioni sopra elencate Spark Firewall (gestito centralmente e localmente) - tutte le versioni sopra elencate N.B. per i prodotti in (End of Support) il vendor non rilascera' alcuna patch https://www.checkpoint.com/it/support-services/support-life-cycle-policy/ :: Impatto Bypass delle funzionalita' di sicurezza (SFB) Esecuzione remota di comandi o codice arbitrario (RCE) :: Soluzioni Applicare gli aggiornamenti, seguendo le indicazioni pubblicate dal vendor. Installare il Jumbo Hotfix rilasciato il 9 settembre 2026. https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.20/R81.20/Take_166.htm https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.20/R81.20/Installation-Uninstall.htm https://sc1.checkpoint.com/documents/Jumbo_HFA/R82/R82.00/Take_126.htm https://sc1.checkpoint.com/documents/Jumbo_HFA/R82/R82.00/Installation-Uninstall.htm https://sc1.checkpoint.com/documents/Jumbo_HFA/R82.10/R82.10/R82.10-Take_44.htm https://sc1.checkpoint.com/documents/Jumbo_HFA/R82.10/R82.10/Installation-Uninstall.htm :: Riferimenti Bollettini di sicurezza Check Point https://support.checkpoint.com/results/sk/sk1000117/ https://support.checkpoint.com/results/sk/sk1000118/ Check Point CheckMates https://community.checkpoint.com/t5/General-Topics/Action-Required-Critical-Security-Advisory-VPN-Vulnerabilities/td-p/281995 The Hacker News https://thehackernews.com/2026/09/check-point-discloses-two-98-rated-vpn.html Mitre CVE https://www.cve.org/CVERecord?id=CVE-2026-85102 https://www.cve.org/CVERecord?id=CVE-2026-85103 GARR CERT Security Alert - subscribe/unsubscribe: http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCaqPQXQAKCRDBnEyTZRJg QqmnAJ9sazR13LadvJoBWMA0OZ3wueDX3wCcDIFp2h+DYUWPhRHx+FGGyIrLuro= =0/Gy -----END PGP SIGNATURE-----