2026-012: Critical Vulnerabilities in Check Point Products
Check Point issued emergency hotfixes for two CVSS 9.8 flaws (CVE-2026-85102, CVE-2026-85103) enabling unauthenticated RCE on VPN-enabled gateways.
On 9 September 2026, Check Point released emergency security updates for CVE-2026-85102 (improper certificate-data validation in VPN negotiation) and CVE-2026-85103 (heap overflow in VPN certificate ASN.1 decoding), both CVSS 9.8, allowing unauthenticated remote code execution. The flaws affect Security Gateway, Security Management Server, and Spark Firewall deployments configured with Remote Access or Site-to-Site VPN, spanning versions R80 through R82.10. CERT-EU advisory 2026-012 urges immediate hotfix application, prioritizing internet-facing and perimeter appliances.
- CVE-2026-85102: improper certificate-data validation in VPN negotiation enables unauthenticated remote RCE
- CVE-2026-85103: heap overflow in certificate ASN.1 decoding also affects Security Management Server
- Affects Security Gateway R80–R82.10 and Spark Firewall when Remote Access or Site-to-Site VPN is configured
- CERT-EU urges immediate hotfixes, prioritizing internet-facing and perimeter appliances
- Vendors
- Check Point
- Organizations
- CERT-EU
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-85102 | Unauthenticated RCE in Check Point Quantum Security Gateway via certificate flaw | 9.8 | 54% | KEVPoC | KEV |
| CVE-2026-85103 | Unauthenticated RCE in Check Point Quantum VPN Certificate ASN.1 Decoding | 9.8 | — |
From the original article
2 min read at cert.europa.eu
On 9 September 2026, Check Point released emergency security updates addressing two critical vulnerabilities affecting Check Point Security Gateway, Security Management Server, and Spark Firewall deployments configured to use Remote Access VPN or Site-to-Site VPN. Both vulnerabilities carry a CVSS score of 9. 8 and could allow an unauthenticated, remote attacker to execute arbitrary code on affected appliances.
cert.europa.eu
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.