CVE-2026-85102

Published: Sep 9, 2026Modified: Sep 10, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: cve@checkpoint.com (Secondary)

Description

Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.

Related CWEs

CWE-295

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

References (1)

https://support.checkpoint.com/results/sk/sk1000117

Source: cve@checkpoint.com

Timeline

No history available yet.