CVE-2026-85103: Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding

Critical severity · published Sep 9, 2026

CVE-2026-85103

Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding

9.8

CVSS

4.3%

EPSS

On KEV

Description

A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)4.3% · higher than 91% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Quantum Security Gateway · Check Point

R82.10 with Jumbo Hotfix Take 43 or below; R82 with Jumbo Hotfix Take 125 or below; R81.20 with Jumbo Hotfix Take 165 or below · source: vendor

Quantum Security Management · checkpoint

R82.10 with Jumbo Hotfix Take 43 or below; R82 with Jumbo Hotfix Take 125 or below; R81.20 with Jumbo Hotfix Take 165 or below · source: vendor

In the news

VulnerabilityCritical

Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent

The Dutch Nationaal Cyber Security Centrum (NCSC) is warning of imminent exploitation of two critical flaws in Check Point VPN tracked as CVE-2026-85102 and CVE-2026-85103. [...]

CVE-2026-85102 CVE-2026-85103

Sep 12, 2026·BleepingComputer

Affected product

Quantum Security Gateway

Check Point

All Quantum Security Gateway CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2026-85103

CVE.org

https://www.cve.org/CVERecord?id=CVE-2026-85103

support.checkpoint.com

https://support.checkpoint.com/results/sk/sk1000118