Yes—several Check Point releases identified as end of support (EOS) are also listed as affected by the recent VPN flaws. EOS does not by itself prove a gateway is vulnerable or compromised: administrators need to check the exact release, appliance role and VPN configuration, then apply the vendor’s release-specific fix. If the system is past support, include migration in the response rather than treating a temporary mitigation as a lasting fix.
What the Check Point VPN advisories say
Check Point describes CVE-2026-85102 as improper validation of certificate data during VPN negotiation. The vendor says it can allow unauthenticated remote code execution on a Security Gateway. Check Point reported exploitation attempts against Spark customers globally; it says the fix had been available since September 9, 2026, and exploitation attempts began September 12. Those reports are not a count of compromised gateways.
As an Amazon Associate I earn from qualifying purchases.
A second flaw, CVE-2026-85103, is described by Singapore’s Cyber Security Agency (CSA) as a heap overflow in VPN certificate ASN.1 decoding that can allow unauthenticated remote code execution on a Security Gateway or Security Management Server. CERT-EU also describes it as a heap overflow in certificate decoding. CSA and CERT-EU give both CVEs a CVSS score of 9.8; that is a severity score, not a measure of how many systems are affected.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Which end-of-support versions are listed as affected?
Singapore CSA lists the following releases as EOS and affected by the VPN flaws. The lifecycle dates below are Check Point support-end dates in the Support Lifecycle Policy reviewed October 7, 2026. They are policy dates, not estimates of vulnerability or compromise.
#1 Best Overall
- Cloud-Managed Centralized Control Easily configure, monitor, and manage the entire network from a single cloud dashboard with real-time visibility and analytics.
- Advanced SD-WAN Capabilities Intelligent traffic routing improves application performance, reduces latency, and ensures reliable connectivity across multiple sites.
- Auto VPN for Secure Connectivity Automatically establishes encrypted site-to-site VPN tunnels for fast, secure communication between locations.
- Traffic Shaping & Application Control Prioritize critical business applications and optimize bandwidth usage for consistent network performance.
- Comprehensive Network Monitoring Provides detailed insights into network health, usage patterns, and security events for proactive management.
| Release or family | Support-end date stated by Check Point |
|---|---|
| R80 and R80.10 | January 2022 |
| R80.20 and R80.30 | September 2022; R80.30 in FIPS mode was supported until June 2024 |
| R80.40 | April 2024 |
| R81 | October 2024 |
| R81.10 and R81.10.x | March 2026 |
| R81.20 | May 2027 |
| R82 and R82.00.x | April 2029 for R82; a separate date for R82.00.x is not stated in the lifecycle figures cited here |
| R82.10 | June 2030 |
| R82.20 | September 2030; CSA identifies this release as unaffected by these flaws |
Release-family labels can conceal differences in a particular take, build, mode or configuration. Use Check Point’s Support Lifecycle Policy and the technical advisory for the exact release rather than assuming a family-level date or affected status settles your appliance’s exposure.
How to determine whether your gateway needs action
- Identify the installed release precisely. Record the product, version, take/build and management mode from the appliance and its records. Check every relevant Security Gateway and Security Management Server, not just the management console.
- Confirm the appliance role and VPN configuration. The advisory scope is configuration- and product-specific. Establish whether the device is a Security Gateway or Security Management Server, whether the affected VPN functionality is in use, and whether it is centrally managed or a locally managed Spark Firewall.
- Match the release to Check Point’s technical advisory. Check the release-specific affected versions, fixed take/build, hotfix instructions and validation method. The institutional summaries do not establish those build numbers, so do not infer one from the release name or install a fix intended for a different release.
- Prioritize internet-facing and perimeter appliances. CERT-EU recommends applying available hotfixes as soon as possible, prioritizing systems in those positions. Track the exact fix and validation result for each appliance before closing the work.
- Review for signs of attempted or successful activity. For CVE-2026-85102, Check Point advises reviewing logs for anomalous certificate-based Mobile Access logins and investigating follow-on activity. Its example certificate subjects are not exhaustive; do not limit a search to those examples.
What to do if you cannot patch immediately
For a Site-to-Site VPN deployment that cannot be patched at once, Singapore CSA relays Check Point’s temporary guidance to disable implied VPN rules and restrict UDP ports 500 and 4500 to known peer IP addresses. CSA explicitly says this mitigation does not apply to locally managed Spark Firewall.
Rank #2
- HUNSN RZ02 equipped with core i5 3210m processor, compatible with many freebsd based router systems, linux distros, or win.os supported, easy configuration and management, support aes new instructions
- Compatibility, firewalls for pfsense, opnsense and other popular open-source software solutions
- Standard 1u, atx power, with power cord, all use a big brand memory and ssd with quality assurance, ready to run straight out of the box
- Designed with console, 2 x usb3.0, 8 x lan, pws, rst, power switch, ac socket, vga, size at 430 x 280 x 44.5mm
- Original industry network motherboard, low power consumption, low heat, use dedicated turbo silent cooling fan to ensure long-term operation
Apply that guidance only where the deployment matches its stated scope, and verify the change against the organization’s VPN design. It reduces exposure; it does not install the fix, establish that a system is clean, or replace a supported upgrade. Keep the hotfix or migration as the remediation task.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Why EOS changes the response
An affected release that has passed its support end date presents two related but distinct problems: the immediate vulnerability response and the longer-term support gap. The first requires matching the exact appliance and configuration to Check Point’s advisory and applying its release-specific fix. The second requires a plan to move to a supported release, with compatibility, licensing and migration requirements checked for the organization’s deployment.
Rank #3
- Partaker S03 Firewall Appliance with Intel Core i7 1165G7 Processor: This device is a powerful and versatile firewall appliance that can run various FreeBSD-based router systems, Linux distros, or Windows OS. It supports Intel AES New Instructions (AES-NI), which can enhance encryption and decryption performance and security.
- Compatible with multiple open-source firewall software solutions: This device can work with popular open-source firewall software such as pf-Sense Plus, OPNsense, and others, giving you more flexibility and control over your network security and management.
- Standard 19 inch 1U rackmount design with low power consumption: This device has a standard 19 inch 1U rackmount chassis, which can be easily installed in your server cabinet. It consumes only 50W of power, saving energy and reducing heat. It comes with a power cord, ready to use out of the box.
- High-quality components and silent cooling fan: This device uses branded memory and SSD/HDD with quality assurance, ensuring fast and stable performance. It also uses a dedicated turbo silent cooling fan, which can keep the device cool and quiet, even under heavy load.
- Rich interfaces and ports for easy connectivity: This device has a console port, 2 x USB 3.0 ports, 6 x LAN ports, a VGA port, and an ATX power socket, providing you with multiple options for connecting your devices and monitors. The Partaker S03 model has a size of 440 x 255 x 45mm, compact and convenient.
Check Point’s lifecycle policy lists R81.20 as supported until May 2027, R82 until April 2029, R82.10 until June 2030 and R82.20 until September 2030. These dates are vendor policy dates reviewed October 7, 2026; they do not establish that a release is affected or fixed. CSA identifies R82.20 as unaffected by the two flaws discussed here, but any upgrade decision should still be checked against current vendor guidance and the appliance’s requirements.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Sources and limits
The vulnerability and log-review details above are from Check Point’s September 2026 security advisory. The affected-release list and temporary Site-to-Site mitigation are from Singapore CSA’s advisory; the CVE-2026-85103 summary and prioritization guidance are from CERT-EU Security Advisory 2026-012, published in September 2026. Lifecycle dates are from Check Point’s Support Lifecycle Policy reviewed October 7, 2026.
These sources do not establish the fixed take/build for every release or determine whether a particular organization’s installation is exposed. Consult Check Point’s release-specific technical advisories for the applicable fix and validation procedure. No population-level figure for affected or compromised installations is established by the cited material.
Quick Recap
Best Value
- Item Package Dimension: 10.0787401472L X 8.8976377862W X 7.9527558974H Inches
- Item Package Weight - 5.6438339072 Pounds
- Item Package Quantity - 1
- Product Type - Networking Router
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
