What’s Vulnerable › Vulnerabilities
CVE-2026-85103: Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 4.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-09-09 · updated 2026-09-10
- Weakness: CWE-122
Description
A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.
Affected products
- Check Point Quantum Security Gateway: through R82.10 with Jumbo Hotfix Take 43; through R82 with Jumbo Hotfix Take 125; through R81.20 with Jumbo Hotfix Take 165
- checkpoint Quantum Security Management: through R82.10 with Jumbo Hotfix Take 43; through R82 with Jumbo Hotfix Take 125; through R81.20 with Jumbo Hotfix Take 165
In the news
References
Get alerted when CVE-2026-85103 or the next vulnerability affects your stack