Cybersecurity Research

Check Point's Weekly Bulletin Flags Protections for Windows, Ivanti and WinRAR Vulnerabilities

Check Point Research · 20 Oct 2026

Key Takeaway Check whether your business uses Windows, Ivanti Connect Secure or WinRAR, and confirm with your IT provider that the relevant security updates for these CVEs are applied.

Check Point Research has published its weekly Threat Intelligence Report for the week of 19th October. The full bulletin is available as a download, and the opening section we have seen is brief. It does not describe the underlying attacks in detail, so this article covers only what that opening section states.

The excerpt lists three vulnerabilities for which Check Point's intrusion prevention system (IPS) provides protection. The first is a Microsoft Windows Shell command injection flaw, tracked as CVE-2026-96951. The second is an authentication bypass in Ivanti Connect Secure, tracked as CVE-2026-104935. The third is a directory traversal issue in RARLAB WinRAR, tracked as CVE-2025-8088.

The excerpt does not explain how these flaws are being exploited, who is behind any attacks, or how many organisations are affected. For that detail, readers should consult the full bulletin from Check Point Research. Even so, the products named are widely used in business environments: Windows on staff computers, Ivanti Connect Secure for remote access, and WinRAR for handling compressed files. Businesses using any of them should check whether they are affected.

Check Point Research Vulnerabilities Ivanti WinRAR Windows

Summarised by CISO AI from Check Point Research, written with Claude Sonnet 5.5. We link back to every original so you can read it yourself.