# CVE-2026-85103: Check Point Quantum Security heap buffer overflow in VPN certificate ASN.1 decoding

Source: https://junglewise.ai/threats/cve-2026-85103-check-point-quantum-security-heap-buffer-overflow-in-vpn  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-09. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-85103 · Severity: critical · CVSS 9.8 · Published 2026-09-09

Check Point Quantum Security Management and Security Gateway are critical network security appliances that manage firewall rules, VPN access, and threat protection for enterprise networks. A heap buffer overflow in the ASN.1 certificate parsing code allows attackers without authentication to crash these systems or execute arbitrary code remotely, potentially compromising all network security controls and encrypted VPN connections they protect.

Technologies: [Check Point Quantum Security Management](https://junglewise.ai/threats/technologies/quantum-security-management). Vendors: [Check Point](https://junglewise.ai/threats/vendors/check-point).

## Quick answers

**Is CVE-2026-85103 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-85103 being exploited in the wild.

**How severe is CVE-2026-85103?** Critical severity, with a CVSS score of 9.8, published 9 September 2026.

**Which products and versions are affected?** Check Point Quantum Security Gateway <UNKNOWN>; Check Point Quantum Security Management <UNKNOWN>.

**Is there a fix for CVE-2026-85103?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-85103 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-85103?** Check whether you run Check Point Quantum Security Gateway or Check Point Quantum Security Management at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

This is a heap-based buffer overflow vulnerability in the ASN.1 decoding functionality used to parse VPN certificates on Check Point Quantum Security appliances. The vulnerability exists in certificate processing code that is reachable without prior authentication, making it remotely exploitable over the network. An attacker can craft a malicious certificate with an oversized field that triggers the overflow when parsed, leading to arbitrary code execution in the security appliance's memory space. No patch status is currently available from the references provided.

## Affected products

- Check Point Quantum Security Management <UNKNOWN>
- Check Point Quantum Security Gateway <UNKNOWN>

## Timeline

- 2026-09-09: disclosed

## References

- [https://support.checkpoint.com/results/sk/sk1000118](https://support.checkpoint.com/results/sk/sk1000118)

## Related threats

- [Check Point Gaia Portal privilege escalation to root](https://junglewise.ai/threats/cve-2026-62145-check-point-gaia-portal-privilege-escalation-to-root)
- [Check Point Security Management authentication bypass in Management Server](https://junglewise.ai/threats/cve-2026-62144-check-point-security-management-authentication-bypass-in)
- [Check Point SmartConsole authentication bypass in login process](https://junglewise.ai/threats/cve-2026-16232-check-point-smartconsole-authentication-bypass-in-login-process)