Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent

Two critical vulnerabilities in Check Point VPN (CVE-2026-85102 and CVE-2026-85103) allow remote attackers to execute arbitrary code and seize full control of affected systems, making them high-value targets for threat actors. The Dutch NCSC's warning of imminent exploitation underscores how quickly adversaries operationalize public vulnerability disclosures, especially against widely deployed network perimeter devices. VPN gateways are particularly dangerous targets because they sit at the edge of the network and often carry elevated trust and access privileges. Delayed patching of internet-facing infrastructure in this threat environment is tantamount to leaving the front door unlocked.