Are CP Products with 81.x and 82 safe from CVE-2025-26465 and CVE-2025-26466

[Blason_R]

Hi Team,

According to the recent vulnerabilities disclosed by Qualys which are CVE-2025-26465/26466 curious to know if CP products are vulnerable and if any fix is released?

TIA

Blason R

[Chris_Atkinson]

Please raise this with TAC otherwise monitor these repositories:

https://support.checkpoint.com/security-advisories

https://support.checkpoint.com/results/sk/sk65269 

[the_rock]

I agree with Chris, best to open TAC case. Ironically enough, when I check those CVEs on support site, all I get is your post lol

And FWIW, see what AI Copilot says:

I'm sorry, but I don't have the information on that topic. For the most accurate and up-to-date information regarding vulnerabilities and their impact on Check Point products, I recommend referring to the official Check Point support site or contacting Check Point Support directly. You can visit the support site at Check Point Support.

Learn more:

1. sk105284 - Check Point response to OpenSSL Security advisory 19 March 2015
2. sk170918 - Check Point response to FireEye red team tools leak
3. sk42545 - Check Point response to Vulnerabilities in Visual Studio Active Template Library (MS09-035...
4. sk162212 - Is Check Point Endpoint Security Client vulnerable to CVE-2019-8286?
5. sk175589 - Check Point response to CVE-2021-3781 (Command Execution Vulnerability in Ghostscript)
6. sk147552 - Check Point response to CVE-2018-20346 (Magellan), CVE-2018-20505, CVE-2018-20506
7. sk182320 - Check Point response to CVE-2024-2511
8. sk176113 - Check Point response to Apache CVEs - November 2021 for httpd versions between 2.4.41 and...
9. sk120493 - Check Point response to CVE-2017-13715
10. sk182336 - Preventative Hotfix for CVE-2024-24919 - Quantum Gateway Information Disclosure

[G_W_Albrecht]

If we look at the SSH version in R81.x/R82, we learn that only CVE-2025-26465 is present according to the Qualis version list.

[PhoneBoy]

For an official response, please check with TAC.
Unofficially, I don't believe these CVEs to be major issues:

• CVE-2025-26465 is an ssh client vulnerability that requires an option to be explicitly set in the ssh_config file that isn't set by default. The only way to exploit this is from expert mode, which should only be given to trusted users.
• CVE-2025-26466 appears to be related to a version of OpenSSH we currently don't use.

[genisis__]

Note if this is related to what I queried, but I do have a TAC case related to OpenSSH vulnerability; currently waiting on a response from TAC.  I know when Tenable scanned the appliances it rated the OpenSSH as medium level vulnerability. 

[the_rock]

Please keep us posted what they say. I had customer ask me about it yesterday, but I told him there is community post on the subject, so did not bother opening a TAC case.

Andy

[genisis__]

Will do, I'm hoping they will say that OpenSSH will be updated in the next Jumbo.

[the_rock]

Latest one is 98, so lets see.

Andy

[Blason_R]

The severity of the vulnerabilities is not classified as medium or high if they are identified by any organization regulated by authorities, which must either address the issues through patching or provide justification for their existence.

[the_rock]

You got that 100% right @Blason_R