Critical severity9.8NVD Advisory· Published Sep 9, 2026· Updated Sep 10, 2026
CVE-2026-85103
CVE-2026-85103
Description
A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.
Affected products
2Patches
Vulnerability mechanics
References
1News mentions
9- Check Point Warns of Management Server Zero-Day Exploited in Targeted AttacksThe Hacker News · Sep 22, 2026
- Breach Roundup: China Calls for Stronger AI OversightGovInfoSecurity · Sep 18, 2026
- Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as RootThe Hacker News · Sep 17, 2026
- ⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and RootkitsThe Hacker News · Sep 14, 2026
- NCSC Warns of Critical Check Point VPN Flaws as Large-Scale Exploitation Is ExpectedCyber Security News · Sep 14, 2026
- Weekly Cybersecurity Newsletter Bulletin – Microsoft 0-day, FortiOS, PAN-OS Flaw, Revolut Data Breach, and 20+ StoriesCyber Security News · Sep 14, 2026
- Check Point Patches Critical VPN VulnerabilitiesSecurityWeek · Sep 11, 2026
- Critical Check Point VPN Vulnerabilities Enable Remote Code Execution AttacksCyber Security News · Sep 10, 2026
- Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCEThe Hacker News · Sep 10, 2026