CRITICAL CWE-122
CVE-2026-85103
Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding
Check Point·Quantum Security Gateway
9.8/ 10
CVSS 3.1
Critical severity
4.3%
EPSS exploit odds
Chance of exploitation in the next 30 days
Higher than 91% of all CVEs
Not listed
CISA KEV catalog
No confirmed in-the-wild exploitation on CISA's list.
Timeline
- Published
- Sep 9, 2026
- Updated
- Sep 10, 2026
- First covered
- Sep 12, 2026
- Latest story
- 2 months ago
Summary
A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.
CWE-122Heap-based Buffer Overflow.
Attack profile
Attack vectorNetwork
ComplexityLow
PrivilegesNone
User interactionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HAffected products
- Check Point Quantum Security GatewayR82.10 with Jumbo Hotfix Take 43 or belowR82 with Jumbo Hotfix Take 125 or belowR81.20 with Jumbo Hotfix Take 165 or below
- Check Point Quantum Security ManagementR82.10 with Jumbo Hotfix Take 43 or belowR82 with Jumbo Hotfix Take 125 or belowR81.20 with Jumbo Hotfix Take 165 or below