integrity360

Check Point has disclosed a critical vulnerability affecting Remote Access VPN and Site-to-Site VPN deployments that could allow an unauthenticated attacker to achieve Remote Code Execution (RCE) on vulnerable Security Gateways. The vulnerability, tracked as CVE-2026-85102, has been assigned a CVSS score of 9.8 (Critical). Check Point states that the issue stems from improper certificate trust validation during VPN negotiation.

.png) Cisco has confirmed active exploitation of CVE-2026-20079, a critical authentication bypass vulnerability affecting Cisco Secure Firewall Management Center (FMC) software. The vulnerability carries the maximum CVSS score of 10.0 and allows unauthenticated remote attackers to bypass authentication and execute scripts and commands with root privileges on vulnerable systems.

.png) Check Point has disclosed and patched two critical vulnerabilities affecting its VPN certificate processing mechanisms. Both vulnerabilities are rated CVSS 9.8 (Critical) and may enable an unauthenticated remote attacker to achieve Remote Code Execution (RCE) under specific, undisclosed conditions. Check Point has stated that it has not observed active exploitation of either vulnerability at the time of disclosure

A critical vulnerability, CVE-2026-76969, has been identified in the SAP Cloud Application Programming Model (CAP). The vulnerability affects the @sap/cds-mtxs library used in multitenant CAP applications with extensibility enabled and may allow an unauthenticated attacker to obtain sensitive credentials and subsequently manipulate tenant data. Sources describe the issue as resulting from insufficient validation of certain functionality within affected applications.

.png) SonicWall has released emergency security updates for two vulnerabilities affecting its Secure Mobile Access (SMA) 1000 series appliances after confirming evidence of active exploitation in the wild. The vulnerabilities can potentially be chained together to achieve remote code execution on vulnerable systems.