Is CVE-2026-85103 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-85103 being exploited in the wild.

How severe is CVE-2026-85103?

Critical severity, with a CVSS score of 9.8, published 9 September 2026.

Which products and versions are affected?

Check Point Quantum Security Gateway ; Check Point Quantum Security Management .

Is there a fix for CVE-2026-85103?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-85103 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-85103?

Check whether you run Check Point Quantum Security Gateway or Check Point Quantum Security Management at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-85103: Check Point Quantum Security heap buffer overflow in VPN certificate ASN.1 decoding

CVE-2026-85103 · Severity: critical · CVSS 9.8 · Published 2026-09-09

Check Point Quantum Security Management and Security Gateway are critical network security appliances that manage firewall rules, VPN access, and threat protection for enterprise networks. A heap buffer overflow in the ASN.1 certificate parsing code allows attackers without authentication to crash these systems or execute arbitrary code remotely, potentially compromising all network security controls and encrypted VPN connections they protect.

Technologies: Check Point Quantum Security Management. Vendors: Check Point.

Quick answers

Is CVE-2026-85103 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-85103 being exploited in the wild.
How severe is CVE-2026-85103?: Critical severity, with a CVSS score of 9.8, published 9 September 2026.
Which products and versions are affected?: Check Point Quantum Security Gateway <UNKNOWN>; Check Point Quantum Security Management <UNKNOWN>.
Is there a fix for CVE-2026-85103?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-85103 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-85103?: Check whether you run Check Point Quantum Security Gateway or Check Point Quantum Security Management at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This is a heap-based buffer overflow vulnerability in the ASN.1 decoding functionality used to parse VPN certificates on Check Point Quantum Security appliances. The vulnerability exists in certificate processing code that is reachable without prior authentication, making it remotely exploitable over the network. An attacker can craft a malicious certificate with an oversized field that triggers the overflow when parsed, leading to arbitrary code execution in the security appliance's memory space. No patch status is currently available from the references provided.

Affected products

Check Point Quantum Security Management <UNKNOWN>
Check Point Quantum Security Gateway <UNKNOWN>

Timeline

2026-09-09: disclosed

References

https://support.checkpoint.com/results/sk/sk1000118

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.