CVE-2026-85102 Checkpoint Quantum Security Gateway
Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.
- CVSS
- 9.8 Critical
- EPSS
- 54%
- Percentile
- 99
- Published
- 2026-09-09
- Force
- 11 of 12
- Public PoC
- 1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
On CISA’s exploited list
Check Point Multiple Products Improper Certificate Validation Vulnerability
- Added
- 2026-09-22
- Federal patch deadline
- 2026-09-25
- Ransomware use
- not known