Heap-based Buffer Overflow Vulnerability in Check Point Quantum Security Systems
CVE-2026-85103

9.8CRITICAL

Key Information:

Vendor

Checkpoint
Status
Quantum Security Gateway
Quantum Security Management
Vendor
CVE Published:
9 September 2026

Badges

👾 Exploit Exists📰 News Worthy

What is CVE-2026-85103?

A heap-based buffer overflow vulnerability in the ASN.1 decoding process of VPN certificates can be exploited by unauthenticated remote attackers. By leveraging this flaw, they may execute arbitrary code on vulnerable Check Point Quantum Security Management and Quantum Security Gateway systems, leading to potential unauthorized access and control over the affected systems.

Affected Version(s)

Quantum Security Gateway R82.10 with Jumbo Hotfix Take 43 or below

Quantum Security Gateway R82 with Jumbo Hotfix Take 125 or below

Quantum Security Gateway R81.20 with Jumbo Hotfix Take 165 or below

News Articles

favicon imageBleepingComputer

New Check Point flaw lets hackers execute code with root privileges

Check Point Software has released security updates to address a critical vulnerability that can let attackers execute code with root privileges on management systems.

1 month ago

favicon imageThe Hacker News

Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE

Check Point fixes two VPN certificate flaws that can enable unauthenticated remote code execution under unspecified conditions.

References

https://support.checkpoint.com/results/sk/sk1000118

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • 📰

    First article discovered by The Hacker News

  • Vulnerability published

  • Vulnerability Reserved

.