CVE-2026-85103 | defend.network

What is CVE-2026-85103?

A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.

CVSS9.8 NVD 3.1

SeverityCRITICAL

ExploitationNo exploitation reported

Triage statusNo Known Exploit

ActionPatch within 48 hours

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWECWE-122

NVD published2026-09-09

NVD last modified2026-09-10

Timeline

2026-09-09Published to the U.S. National Vulnerability Database (NVD)
2026-09-10NVD record last updated
2026-09-14First covered in a defend.network daily briefing

Affected product

See advisory

References

Referenced in our briefings & reports

Check Point VPN & Tencent flaws in active exploitation; RubyGems RCE confirmed (2026-09-14)

Browse all tracked CVEs in the defend.network CVE database →

🤖 This CVE page is generated by defend.network from NVD, CISA KEV, EPSS, and our verified daily briefings. Severity and exploitation data come from official sources; always verify remediation steps against the official vendor advisory before acting in production.

What is CVE-2026-85103?

Timeline

Affected product

References

Referenced in our briefings & reports

Get Critical CVE Alerts