by Kastro
Paper/Archive/CVE-2026-85103

CVE-2026-85103

checkpoint Quantum Security Gateway — Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding

EPSS 4%CVSS 9.8
critical.is priorityof 100
48
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 91.1.911 × 2018.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.

Affected

ProductAffectedFixed inSource
Quantum Security GatewayR82.10 with Jumbo Hotfix Take 43 or below–CNA
Quantum Security GatewayR82 with Jumbo Hotfix Take 125 or below–CNA
Quantum Security GatewayR81.20 with Jumbo Hotfix Take 165 or below–CNA
Quantum Security ManagementR82.10 with Jumbo Hotfix Take 43 or below–CNA
Quantum Security ManagementR82 with Jumbo Hotfix Take 125 or below–CNA
Quantum Security ManagementR81.20 with Jumbo Hotfix Take 165 or below–CNA

Scores by source

checkpoint (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsupport.checkpoint.com/results/sk/sk1000118