CVE-2026-85102

Published: Sep 9, 2026Modified: Sep 23, 2026CISA KEV

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: cve@checkpoint.com (Secondary)

Description

Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.

Affected (137)

Products: Checkpoint: Gaia Embedded, Gaia Os

Checkpoint

2 products

Gaia Embedded

Gaia Os

Configuration A

21 vulnerable · 21 platform

Vulnerable Software	Affected Versions
Checkpoint Gaia Embedded	r81.10.00 ≤ version < r81.10.17
Checkpoint Gaia Embedded	r82.00.00 ≤ version < r82.00.10
Checkpoint Gaia Embedded	Version r81.10.17
Checkpoint Gaia Embedded	Version r81.10.17 build_996004508
Checkpoint Gaia Embedded	Version r81.10.17 build_996004620
Checkpoint Gaia Embedded	Version r81.10.17 build_996004653
Checkpoint Gaia Embedded	Version r81.10.17 build_996004721
Checkpoint Gaia Embedded	Version r81.10.17 build_996004892
Checkpoint Gaia Embedded	Version r81.10.17 build_996004901
Checkpoint Gaia Embedded	Version r81.10.17 build_996004914
Checkpoint Gaia Embedded	Version r81.10.17 build_996004936
Checkpoint Gaia Embedded	Version r82.00.10
Checkpoint Gaia Embedded	Version r82.00.10 build_998001559
Checkpoint Gaia Embedded	Version r82.00.10 build_998001562
Checkpoint Gaia Embedded	Version r82.00.10 build_998002110
Checkpoint Gaia Embedded	Version r82.00.10 build_998002112
Checkpoint Gaia Embedded	Version r82.00.10 build_998002133
Checkpoint Gaia Embedded	Version r82.00.10 build_998002203
Checkpoint Gaia Embedded	Version r82.00.10 build_998002216
Checkpoint Gaia Embedded	Version r82.00.10 build_998002242
Checkpoint Gaia Embedded	Version r82.00.10 build_998002279

Running on/with	Platform Versions
Checkpoint Quantum Spark 1530	All versions
Checkpoint Quantum Spark 1535	All versions
Checkpoint Quantum Spark 1550	All versions
Checkpoint Quantum Spark 1555	All versions
Checkpoint Quantum Spark 1570	All versions
Checkpoint Quantum Spark 1570r	All versions
Checkpoint Quantum Spark 1575	All versions
Checkpoint Quantum Spark 1575r	All versions
Checkpoint Quantum Spark 1590	All versions
Checkpoint Quantum Spark 1595	All versions
Checkpoint Quantum Spark 1595r	All versions
Checkpoint Quantum Spark 1600	All versions
Checkpoint Quantum Spark 1800	All versions
Checkpoint Quantum Spark 1900	All versions
Checkpoint Quantum Spark 2000	All versions
Checkpoint Quantum Spark 2530	All versions
Checkpoint Quantum Spark 2550	All versions
Checkpoint Quantum Spark 2560	All versions
Checkpoint Quantum Spark 2570	All versions
Checkpoint Quantum Spark 2580	All versions
Checkpoint Quantum Spark 2590	All versions

Configuration B

116 vulnerable · 22 platform

Vulnerable Software	Affected Versions
Checkpoint Gaia Os	r80 ≤ version < r81.10
Checkpoint Gaia Os	Version r81.10
Checkpoint Gaia Os	Version r81.10 take_106
Checkpoint Gaia Os	Version r81.10 take_107
Checkpoint Gaia Os	Version r81.10 take_109
Checkpoint Gaia Os	Version r81.10 take_110
Checkpoint Gaia Os	Version r81.10 take_113
Checkpoint Gaia Os	Version r81.10 take_128
Checkpoint Gaia Os	Version r81.10 take_129
Checkpoint Gaia Os	Version r81.10 take_130
Checkpoint Gaia Os	Version r81.10 take_131
Checkpoint Gaia Os	Version r81.10 take_132
Checkpoint Gaia Os	Version r81.10 take_135
Checkpoint Gaia Os	Version r81.10 take_139
Checkpoint Gaia Os	Version r81.10 take_141
Checkpoint Gaia Os	Version r81.10 take_14
Checkpoint Gaia Os	Version r81.10 take_150
Checkpoint Gaia Os	Version r81.10 take_152
Checkpoint Gaia Os	Version r81.10 take_156
Checkpoint Gaia Os	Version r81.10 take_158
Checkpoint Gaia Os	Version r81.10 take_165
Checkpoint Gaia Os	Version r81.10 take_169
Checkpoint Gaia Os	Version r81.10 take_170
Checkpoint Gaia Os	Version r81.10 take_171
Checkpoint Gaia Os	Version r81.10 take_172
Checkpoint Gaia Os	Version r81.10 take_173
Checkpoint Gaia Os	Version r81.10 take_174
Checkpoint Gaia Os	Version r81.10 take_177
Checkpoint Gaia Os	Version r81.10 take_181
Checkpoint Gaia Os	Version r81.10 take_183
Checkpoint Gaia Os	Version r81.10 take_187
Checkpoint Gaia Os	Version r81.10 take_22
Checkpoint Gaia Os	Version r81.10 take_30
Checkpoint Gaia Os	Version r81.10 take_38
Checkpoint Gaia Os	Version r81.10 take_44
Checkpoint Gaia Os	Version r81.10 take_45
Checkpoint Gaia Os	Version r81.10 take_55
Checkpoint Gaia Os	Version r81.10 take_61
Checkpoint Gaia Os	Version r81.10 take_66
Checkpoint Gaia Os	Version r81.10 take_75
Checkpoint Gaia Os	Version r81.10 take_78
Checkpoint Gaia Os	Version r81.10 take_79
Checkpoint Gaia Os	Version r81.10 take_81
Checkpoint Gaia Os	Version r81.10 take_82
Checkpoint Gaia Os	Version r81.10 take_85
Checkpoint Gaia Os	Version r81.10 take_87
Checkpoint Gaia Os	Version r81.10 take_93
Checkpoint Gaia Os	Version r81.10 take_94
Checkpoint Gaia Os	Version r81.10 take_95
Checkpoint Gaia Os	Version r81.10 take_9
Checkpoint Gaia Os	Version r81.20
Checkpoint Gaia Os	Version r81.20 take_101
Checkpoint Gaia Os	Version r81.20 take_103
Checkpoint Gaia Os	Version r81.20 take_105
Checkpoint Gaia Os	Version r81.20 take_10
Checkpoint Gaia Os	Version r81.20 take_111
Checkpoint Gaia Os	Version r81.20 take_113
Checkpoint Gaia Os	Version r81.20 take_115
Checkpoint Gaia Os	Version r81.20 take_118
Checkpoint Gaia Os	Version r81.20 take_119
Checkpoint Gaia Os	Version r81.20 take_120
Checkpoint Gaia Os	Version r81.20 take_122
Checkpoint Gaia Os	Version r81.20 take_126
Checkpoint Gaia Os	Version r81.20 take_127
Checkpoint Gaia Os	Version r81.20 take_141
Checkpoint Gaia Os	Version r81.20 take_146
Checkpoint Gaia Os	Version r81.20 take_14
Checkpoint Gaia Os	Version r81.20 take_158
Checkpoint Gaia Os	Version r81.20 take_161
Checkpoint Gaia Os	Version r81.20 take_24
Checkpoint Gaia Os	Version r81.20 take_26
Checkpoint Gaia Os	Version r81.20 take_38
Checkpoint Gaia Os	Version r81.20 take_41
Checkpoint Gaia Os	Version r81.20 take_43
Checkpoint Gaia Os	Version r81.20 take_45
Checkpoint Gaia Os	Version r81.20 take_53
Checkpoint Gaia Os	Version r81.20 take_54
Checkpoint Gaia Os	Version r81.20 take_65
Checkpoint Gaia Os	Version r81.20 take_70
Checkpoint Gaia Os	Version r81.20 take_76
Checkpoint Gaia Os	Version r81.20 take_79
Checkpoint Gaia Os	Version r81.20 take_84
Checkpoint Gaia Os	Version r81.20 take_89
Checkpoint Gaia Os	Version r81.20 take_8
Checkpoint Gaia Os	Version r81.20 take_90
Checkpoint Gaia Os	Version r81.20 take_92
Checkpoint Gaia Os	Version r81.20 take_96
Checkpoint Gaia Os	Version r81.20 take_98
Checkpoint Gaia Os	Version r81.20 take_99
Checkpoint Gaia Os	Version r82.10
Checkpoint Gaia Os	Version r82.10 take_19
Checkpoint Gaia Os	Version r82.10 take_24
Checkpoint Gaia Os	Version r82.10 take_36
Checkpoint Gaia Os	Version r82.10 take_40
Checkpoint Gaia Os	Version r82.10 take_6
Checkpoint Gaia Os	Version r82
Checkpoint Gaia Os	Version r82 take_103
Checkpoint Gaia Os	Version r82 take_107
Checkpoint Gaia Os	Version r82 take_10
Checkpoint Gaia Os	Version r82 take_118
Checkpoint Gaia Os	Version r82 take_122
Checkpoint Gaia Os	Version r82 take_12
Checkpoint Gaia Os	Version r82 take_14
Checkpoint Gaia Os	Version r82 take_18
Checkpoint Gaia Os	Version r82 take_19
Checkpoint Gaia Os	Version r82 take_25
Checkpoint Gaia Os	Version r82 take_33
Checkpoint Gaia Os	Version r82 take_34
Checkpoint Gaia Os	Version r82 take_36
Checkpoint Gaia Os	Version r82 take_39
Checkpoint Gaia Os	Version r82 take_41
Checkpoint Gaia Os	Version r82 take_43
Checkpoint Gaia Os	Version r82 take_44
Checkpoint Gaia Os	Version r82 take_60
Checkpoint Gaia Os	Version r82 take_73
Checkpoint Gaia Os	Version r82 take_91

Running on/with	Platform Versions
Checkpoint Quantum 3600	All versions
Checkpoint Quantum 3800	All versions
Checkpoint Quantum Force 19100	All versions
Checkpoint Quantum Force 19200	All versions
Checkpoint Quantum Force 29100	All versions
Checkpoint Quantum Force 29200	All versions
Checkpoint Quantum Force 3920	All versions
Checkpoint Quantum Force 3950	All versions
Checkpoint Quantum Force 3970	All versions
Checkpoint Quantum Force 3980	All versions
Checkpoint Quantum Force 9100	All versions
Checkpoint Quantum Force 9200	All versions
Checkpoint Quantum Force 9300	All versions
Checkpoint Quantum Force 9400	All versions
Checkpoint Quantum Force 9700	All versions
Checkpoint Quantum Force 9800	All versions
Checkpoint Quantum Lightspeed Mls200	All versions
Checkpoint Quantum Lightspeed Mls400	All versions
Checkpoint Quantum Lightspeed Qls250	All versions
Checkpoint Quantum Lightspeed Qls450	All versions
Checkpoint Quantum Lightspeed Qls650	All versions
Checkpoint Quantum Lightspeed Qls800	All versions

Related CWEs

CWE-295

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

References (3)

https://support.checkpoint.com/results/sk/sk1000117

Source: cve@checkpoint.com

MitigationPatchVendor Advisory

https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616/

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Vendor Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-85102

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

US Government Resource

Timeline

No history available yet.