CVE-2026-85103

Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding

Severity
Critical 9.8
CVSS 3.1
Exploited
Not listed
EPSS
0.004
29.9th percentile
Discovered by
Not disclosed
Published
Sep 9, 2026
Assigned by checkpoint

Description

A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.

Weakness: CWE-122

Affected products

Vendor Product Category Matched by
Check Point Quantum Security Gateway Firewall / NGFW cna-assigner
Check Point Quantum Security Management Network & Security Management cna-assigner
Vendor-reported products (2)
  • checkpoint · Quantum Security Gateway
  • checkpoint · Quantum Security Management

Something wrong here?