Check Point Weekly Bulletin Flags Four Vulnerabilities in Metabase, Windows, GitLab and Chrome

Check Point Research has published its weekly threat intelligence report for the week of 14 September. The full bulletin is available as a download, but the opening section names four vulnerabilities in widely used software that Check Point's intrusion prevention system (IPS) now covers.

The listed issues are a SQL injection flaw in Metabase (CVE-2026-72898), an elevation of privilege flaw in the Microsoft Windows Update Stack (CVE-2026-81963), an arbitrary file read flaw in GitLab (CVE-2026-85706), and a type confusion flaw in Google Chrome (CVE-2026-85046). These affect business analytics, operating system updates, code hosting and web browsing.

The excerpt does not explain how these vulnerabilities work, whether they are being exploited in the wild, or how severe they are. Those details sit in the full bulletin, which we have not covered here. Even so, the list is a useful prompt for small businesses to check whether they run any of these products and to confirm their patching is up to date. Organisations that use Check Point's IPS can rely on its protections as an extra layer, but that does not replace applying vendor updates.