CVE-2026-85103

Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding

Severity
Critical 9.8
CVSS 3.1
Remote · no auth what this means
Exploited
Not listed
EPSS
0.037
89.3th percentile
Discovered by
Not disclosed
Published
Sep 9, 2026
Assigned by checkpoint

Description

A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.

Weakness: CWE-122

Affected products

Vendor Product Category Matched by
Check Point Quantum Security Gateway Firewall / NGFW cna-assigner
Check Point Quantum Security Management Network & Security Management cna-assigner
Vendor-reported products (2)
  • checkpoint · Quantum Security Gateway
  • checkpoint · Quantum Security Management

Something wrong here?