Vulnerability intelligence

CVE-2026-85103 is identified as a heap-based buffer overflow vulnerability found within the VPN certificate ASN.1 decoding process. This flaw may enable an unauthenticated remote attacker to execute arbitrary code on affected systems. Specifically, it impacts Check Point Quantum Security Management and Quantum Security Gateway systems, as well as Check Point Spark Firewalls. The vulnerability affects several Check Point versions, including R81.20, R82, R82.10, and older end-of-support versions ranging from R80 to R81.10. Check Point has addressed this issue by releasing fixes through its automated LivePatch service and via Jumbo Hotfix Accumulator packages for the relevant product versions.

CVE-2026-85102 is a vulnerability found in Check Point Quantum Security Gateway products, specifically related to improper certificate trust validation during VPN negotiation. This flaw, categorized under CWE-295 (Improper Certificate Validation), affects Security Gateways and can be triggered by an unauthenticated remote attacker. The vulnerability allows an unauthenticated remote attacker to execute arbitrary code on the Security Gateway by exploiting the improper validation of certificate data during the VPN negotiation process. This issue impacts various versions of Check Point's Security Gateway, Security Management Server, and Spark Firewall when using Site-to-Site or Remote Access VPN.

CVE-2026-86060 is an argument-handling flaw identified in MikroTik RouterOS, specifically within its SSH login path. This vulnerability arises when usernames begin with a prohibited character, which can be manipulated to alter the trusted RouterOS policy mask. Such a change ultimately leads to privilege escalation within the system. Exploitation of CVE-2026-86060 requires an unauthenticated SSH session to successfully reach the RouterOS login helper. This flaw is often discussed in conjunction with CVE-2026-67276, an SSH authentication bypass, as chaining these two vulnerabilities can allow an attacker to gain full, unauthenticated control over affected MikroTik devices. MikroTik has released fixes for this issue in RouterOS versions 6.49.21 (Long-term), 7.23.4 (Long-term), and 7.24.2 (Stable).

No description available

CVE-2026-84869 describes a vulnerability found within the ScreenConnect client. This flaw permits the unauthorized transfer and execution of files during an active remote session, bypassing typical authorization or host confirmation processes. It is important to note that this condition specifically affects the ScreenConnect client and does not impact ScreenConnect servers. The vulnerability is associated with improper privilege management and missing authorization.

CVE-2026-42018 is an improper authentication vulnerability affecting JFrog Artifactory. This flaw allows an unauthenticated caller to obtain an internal anonymous-user token, even when anonymous access is explicitly disabled within the system. The presence of this token could potentially lead to the exposure of sensitive resources within the Artifactory instance. This vulnerability has been observed in active exploitation, often chained with CVE-2026-42016. When combined, these vulnerabilities can enable attackers to escalate privileges and gain administrative control over self-hosted Artifactory servers.