Critical severity9.8CISA KEVNVD Advisory· Published Sep 9, 2026· Updated Sep 23, 2026
CVE-2026-85102
CVE-2026-85102
Description
Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
137cpe:2.3:o:checkpoint:gaia_embedded:*:*:*:*:*:*:*:*+ 19 more
- cpe:2.3:o:checkpoint:gaia_embedded:*:*:*:*:*:*:*:*range: >=r81.10.00,<r81.10.17
- cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:-:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004508:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004620:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004653:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004721:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004892:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004901:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004914:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004936:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:-:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998001559:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998001562:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002110:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002112:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002133:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002203:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002216:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002242:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002279:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:*:*:*:*:*:*:*:*+ 115 more
- cpe:2.3:o:checkpoint:gaia_os:*:*:*:*:*:*:*:*range: >=r80,<r81.10
- cpe:2.3:o:checkpoint:gaia_os:r81.10:-:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_106:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_107:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_109:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_110:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_113:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_128:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_129:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_130:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_131:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_132:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_135:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_139:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_141:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_14:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_150:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_152:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_156:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_158:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_165:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_169:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_170:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_171:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_172:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_173:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_174:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_177:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_181:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_183:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_187:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_22:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_30:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_38:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_44:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_45:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_55:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_61:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_66:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_75:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_78:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_79:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_81:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_82:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_85:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_87:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_93:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_94:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_95:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.10:take_9:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:-:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_101:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_103:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_105:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_10:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_111:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_113:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_115:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_118:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_119:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_120:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_122:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_126:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_127:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_141:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_146:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_14:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_158:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_161:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_24:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_26:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_38:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_41:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_43:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_45:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_53:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_54:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_65:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_70:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_76:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_79:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_84:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_89:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_8:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_90:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_92:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_96:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_98:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r81.20:take_99:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r82.10:-:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r82.10:take_19:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r82.10:take_24:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r82.10:take_36:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r82.10:take_40:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r82.10:take_6:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r82:-:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r82:take_103:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r82:take_107:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r82:take_10:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r82:take_118:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r82:take_122:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r82:take_12:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r82:take_14:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r82:take_18:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r82:take_19:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r82:take_25:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r82:take_33:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r82:take_34:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r82:take_36:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r82:take_39:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r82:take_41:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r82:take_43:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r82:take_44:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r82:take_60:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r82:take_73:*:*:*:*:*:*
- cpe:2.3:o:checkpoint:gaia_os:r82:take_91:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
3- support.checkpoint.com/results/sk/sk1000117nvdMitigationPatchVendor Advisory
- blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616/nvdVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
19- Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File WritesThe Hacker News · Oct 2, 2026
- ⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More ThreatsThe Hacker News · Sep 28, 2026
- 28th September – Threat Intelligence ReportCheck Point Research · Sep 28, 2026
- Week in review: Gyazo breach exposes 23.6M user data, TASK#STOMP steals documentsHelp Net Security · Sep 27, 2026
- CISA Warns of Multiple Check Point Product Vulnerabilities Exploited in AttacksCyber Security News · Sep 25, 2026
- Breach Roundup: Thousands of AI Relays Hide China UsersGovInfoSecurity · Sep 24, 2026
- Hackers Exploit Critical Check Point VPN Flaws to Gain Remote Access Without LoginCyber Security News · Sep 24, 2026
- Attackers hit Check Point Management Servers and Spark firewalls, F5 BIG-IP APM instancesHelp Net Security · Sep 23, 2026
- Check Point Patches Exploited Management Server Zero-DaySecurityWeek · Sep 23, 2026
- Check Point Warns of Management Server Zero-Day Exploited in Targeted AttacksThe Hacker News · Sep 22, 2026
- Checkpoint: 2 Actively-Exploited Flaws Added to CISA KEVVypr Intelligence · Sep 22, 2026
- Breach Roundup: China Calls for Stronger AI OversightGovInfoSecurity · Sep 18, 2026
- ⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and RootkitsThe Hacker News · Sep 14, 2026
- NCSC Warns of Critical Check Point VPN Flaws as Large-Scale Exploitation Is ExpectedCyber Security News · Sep 14, 2026
- Weekly Cybersecurity Newsletter Bulletin – Microsoft 0-day, FortiOS, PAN-OS Flaw, Revolut Data Breach, and 20+ StoriesCyber Security News · Sep 14, 2026
- Check Point Patches Critical VPN VulnerabilitiesSecurityWeek · Sep 11, 2026
- Critical Check Point VPN Vulnerabilities Enable Remote Code Execution AttacksCyber Security News · Sep 10, 2026
- Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCEThe Hacker News · Sep 10, 2026
- CISA Adds Four Known Exploited Vulnerabilities to CatalogCISA Alerts