CVE-2026-85102 – Check Point Quantum Security Gateway
“When the VPN front door trusts the wrong certificate, attackers can take over the gateway that guards the whole network.”
Check Point's update for Quantum Security Gateway fixes two Critical flaws in VPN certificate handling. Attackers are actively exploiting CVE-2026-85102. In that flaw, the gateway trusts certificates it should reject during VPN negotiation, so an unauthenticated remote attacker can run arbitrary code on the Gateway. CVE-2026-85102 has a CVSS score of 9.8, Critical severity.
CVE-2026-85103 is a heap-based buffer overflow in how the product decodes ASN.1 data in VPN certificates. An unauthenticated remote attacker can use it to run arbitrary code on Quantum Security Management and Quantum Security Gateway systems. CVE-2026-85103 has a CVSS score of 9.8, Critical severity. Both flaws can be reached without credentials on an internet-facing security boundary. Apply this update immediately.
Key Details
- Affected Product
- Checkpoint Gaia Embedded
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- None
- CWE Classification
- CWE-295