Vulnerability intelligence
CVE-2026-85103
Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding
A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.
CVSS Score
9.8
Critical
EPSS — Exploit Probability
4.3%
Riskier than 91% of all CVEs · checked 2026-10-24
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
Unconfirmed
Vendor fix published
3 articles across 3 outlets · first covered Sep 9, 2026 · latest Sep 11, 2026
Coverage timeline
RSS-
Check Point Patches Critical VPN Vulnerabilitieswww.securityweek.com · Sep 11, 2026
-
Check Point Fixes Critical VPN Flaws Enabling Unauthenticated Code Executionthehackernews.com · Sep 10, 2026
-
Check Point Patches Critical VPN Flaws Enabling Remote Code Executionsecurityonline.info · Sep 9, 2026