Search/CVE-2026-85102
● CVE — Critical

CVE-2026-85102

VendorcheckpointProductgaia os, gaia embeddedDiscoveredSep 9, 2026UpdatedSep 23, 2026

Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.

View graph Watch Export
CVSS v3.1
9.8 CRITICAL
EPSS
54.1%
probability of exploitation in 30 days
CISA KEV
Listed
confirmed active exploitation
News coverage
15
sources referencing this CVE
Related IOCs
10
seen in the same coverage
EPSS Trend
Sep 11, 2026 → Oct 26, 2026
▲ 53.8pp
0.33% → 54.1% over 7 tracked changes
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Connections
25 relationships
Timeline
disclosure → media coverage
Sep 9, 2026
Disclosure — published as a CVE record. · last revised by NVD Sep 23, 2026
Sep 11, 2026
securityweek.com reports: Check Point Patches Critical VPN Vulnerabilities
Sep 12, 2026
bleepingcomputer.com reports: Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent
Sep 18, 2026
bleepingcomputer.com reports: New Check Point flaw lets hackers execute code with root privileges
Sep 22, 2026
bleepingcomputer.com reports: Check Point warns of Management Server zero-day exploited in attacks
Sep 22, 2026
thehackernews.com reports: Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks
Sep 23, 2026
securityweek.com reports: Check Point Patches Exploited Management Server Zero-Day
Sep 23, 2026
advisories.ncsc.nl reports: NCSC-2026-0365 [1.01] [H/H] Kwetsbaarheden verholpen in Check Point VPN-producten
Sep 23, 2026
helpnetsecurity.com reports: Attackers hit Check Point Management Servers and Spark firewalls, F5 BIG-IP APM instances
Sep 23, 2026
bsi.bund.de reports: Version 1.0: Check Point - Angreifer nutzen Schwachstellen seit Sommer aus
Sep 23, 2026
bleepingcomputer.com reports: InfraTrust report warns network management systems under attack
Sep 23, 2026
bleepingcomputer.com reports: Check Point warns of hackers exploiting Security Gateway VPN RCE flaw
Sep 27, 2026
helpnetsecurity.com reports: Week in review: Gyazo breach exposes 23.6M user data, TASK#STOMP steals documents
Sep 28, 2026
research.checkpoint.com reports: 28th September – Threat Intelligence Report
Sep 28, 2026
thehackernews.com reports: ⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats
Oct 2, 2026
thehackernews.com reports: Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes
Public PoC (1)
github.com/aduli198/CVE-2026-85102
Unverified third-party code — review before executing.