Check PointCVE-2026-85102

Check Point Quantum Security Gateway: remote code execution

CVE-2026-85102 · Published Sep 9, 2026 · updated Sep 23, 2026

Critical9.8

No fix yet

Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.

Affected versions

Package	Affected	Fixed in
Quantum Security Gateway Product	<= R82.10 with Jumbo Hotfix Take 43 or below	No fix yet
	<= R82 with Jumbo Hotfix Take 125 or below	No fix yet
	<= R81.20 with Jumbo Hotfix Take 165 or below	No fix yet

Details and references

CVSS 3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-295

More Check Point advisories

All Check Point

Critical 9.8Sep 22

Check Point Quantum Security Management: path traversalCVE-2026-93616no fix yet Critical 9.8Sep 16

Check Point Quantum Security Management: stack buffer overflowCVE-2026-91843no fix yet Critical 9.8Sep 9

Check Point Quantum Security: heap buffer overflowCVE-2026-85103no fix yet Critical 9.3Aug 3

Check Point Multi-Domain Security Management Server: authentication bypassCVE-2026-18574no fix yet Critical 9.1Jul 22

Check Point Security Management: authentication bypassCVE-2026-62144no fix yet High 7.5Jul 22

Check Point Gaia Portal: code executionCVE-2026-62145no fix yet