CVE Feed

    Dashboard / CVE / CVE-2026-85102

    CVE-2026-85102

    Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.

    Published:Sep 9, 2026
    Last Modified:Sep 23, 2026
    EPS:Sep 9, 2026
    EPSS Score:0.0066
    CVSS Score:9.8

    CISA Notification

    Description

    Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.

    Required Action:

    Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

    Notes:

    No extra notes provided.

    Due Date
    Sep 25, 2026
    41 days ago
    Alert Date
    Sep 22, 2026
    44 days ago

    Affected Products

    Vendor
    Checkpoint
    Product
    Gaia Embedded
    Vendor
    Checkpoint
    Product
    Gaia Os
    Vendor
    Checkpoint
    Product
    Quantum 3600
    Vendor
    Checkpoint
    Product
    Quantum 3800
    Vendor
    Checkpoint
    Product
    Quantum Force 19100
    Vendor
    Checkpoint
    Product
    Quantum Force 19200
    Vendor
    Checkpoint
    Product
    Quantum Force 29100
    Vendor
    Checkpoint
    Product
    Quantum Force 29200
    Vendor
    Checkpoint
    Product
    Quantum Force 3920
    Vendor
    Checkpoint
    Product
    Quantum Force 3950
    Vendor
    Checkpoint
    Product
    Quantum Force 3970
    Vendor
    Checkpoint
    Product
    Quantum Force 3980
    Vendor
    Checkpoint
    Product
    Quantum Force 9100
    Vendor
    Checkpoint
    Product
    Quantum Force 9200
    Vendor
    Checkpoint
    Product
    Quantum Force 9300
    Vendor
    Checkpoint
    Product
    Quantum Force 9400
    Vendor
    Checkpoint
    Product
    Quantum Force 9700
    Vendor
    Checkpoint
    Product
    Quantum Force 9800
    Vendor
    Checkpoint
    Product
    Quantum Lightspeed Mls200
    Vendor
    Checkpoint
    Product
    Quantum Lightspeed Mls400
    Vendor
    Checkpoint
    Product
    Quantum Lightspeed Qls250
    Vendor
    Checkpoint
    Product
    Quantum Lightspeed Qls450
    Vendor
    Checkpoint
    Product
    Quantum Lightspeed Qls650
    Vendor
    Checkpoint
    Product
    Quantum Lightspeed Qls800
    Vendor
    Checkpoint
    Product
    Quantum Security Gateway
    Vendor
    Checkpoint
    Product
    Quantum Spark 1530
    Vendor
    Checkpoint
    Product
    Quantum Spark 1535
    Vendor
    Checkpoint
    Product
    Quantum Spark 1550
    Vendor
    Checkpoint
    Product
    Quantum Spark 1555
    Vendor
    Checkpoint
    Product
    Quantum Spark 1570
    Vendor
    Checkpoint
    Product
    Quantum Spark 1570r
    Vendor
    Checkpoint
    Product
    Quantum Spark 1575
    Vendor
    Checkpoint
    Product
    Quantum Spark 1575r
    Vendor
    Checkpoint
    Product
    Quantum Spark 1590
    Vendor
    Checkpoint
    Product
    Quantum Spark 1595
    Vendor
    Checkpoint
    Product
    Quantum Spark 1595r
    Vendor
    Checkpoint
    Product
    Quantum Spark 1600
    Vendor
    Checkpoint
    Product
    Quantum Spark 1800
    Vendor
    Checkpoint
    Product
    Quantum Spark 1900
    Vendor
    Checkpoint
    Product
    Quantum Spark 2000
    Vendor
    Checkpoint
    Product
    Quantum Spark 2530
    Vendor
    Checkpoint
    Product
    Quantum Spark 2550
    Vendor
    Checkpoint
    Product
    Quantum Spark 2560
    Vendor
    Checkpoint
    Product
    Quantum Spark 2570
    Vendor
    Checkpoint
    Product
    Quantum Spark 2580
    Vendor
    Checkpoint
    Product
    Quantum Spark 2590

    Exploits

    https://github.com/aduli198/CVE-2026-85102

    Common Weakness Enumeration

    CWE-295 Improper Certificate Validation

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High