← Back to Vulnerability Reports CVE Intelligence

CVE-2026-85103

See advisory•CRITICAL · CVSS 9.8•No exploitation reported

What is CVE-2026-85103?

A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.

CVSS9.8 NVD 3.1

SeverityCRITICAL

ExploitationNo exploitation reported

EPSS4% · P91

Triage statusNo Known Exploit

ActionPatch within 48 hours

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWECWE-122

NVD published2026-09-09

NVD last modified2026-09-10

Timeline

2026-09-09Published to the U.S. National Vulnerability Database (NVD)
2026-09-10NVD record last updated
2026-09-14First covered in a defend.network daily briefing

Affected product

See advisory

References

Referenced in our briefings & reports

Check Point VPN & Tencent flaws in active exploitation; RubyGems RCE confirmed (2026-09-14)

Related vulnerabilities

CVE-2026-76471 (same weakness: CWE-122)
CVE-2026-94127 – F5 BIG-IP APM (same weakness: CWE-122)
CVE-2026-69829 – Microsoft Windows (same weakness: CWE-122)
CVE-2026-85880 – Microsoft Windows (same weakness: CWE-122)
CVE-2026-53362 – Linux Kernel (same weakness: CWE-122)
CVE-2026-42945 – F5 Nginx (same weakness: CWE-122)

Browse all tracked CVEs in the defend.network CVE database →

🤖 This CVE page is generated by defend.network from NVD, CISA KEV, EPSS, and our verified daily briefings. Severity and exploitation data come from official sources; always verify remediation steps against the official vendor advisory before acting in production.