CVE-2026-85103

Published Sep 9, 2026

Last updated a day ago

Check Point Quantum Security Management

Quantum Security Gateway

Overview

AI description

Automated description summarized from trusted sources.

CVE-2026-85103 is identified as a heap-based buffer overflow vulnerability found within the VPN certificate ASN.1 decoding process. This flaw may enable an unauthenticated remote attacker to execute arbitrary code on affected systems. Specifically, it impacts Check Point Quantum Security Management and Quantum Security Gateway systems, as well as Check Point Spark Firewalls. The vulnerability affects several Check Point versions, including R81.20, R82, R82.10, and older end-of-support versions ranging from R80 to R81.10. Check Point has addressed this issue by releasing fixes through its automated LivePatch service and via Jumbo Hotfix Accumulator packages for the relevant product versions.

Description: A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.
Source: cve@checkpoint.com
NVD status: Awaiting Analysis

Risk scores

CVSS 3.1

Type: Secondary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

cve@checkpoint.com: CWE-122

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 30

References