CVE-2026-85103
Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding
Severity
Critical 9.8
CVSS 3.1
Exploited
Not listed
EPSS
0.004
29.9th percentile
Discovered by
Not disclosed
Published
Sep 9, 2026
Assigned by checkpoint
Description
A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.
Weakness: CWE-122
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Check Point | Quantum Security Gateway | Firewall / NGFW | cna-assigner |
| Check Point | Quantum Security Management | Network & Security Management | cna-assigner |
Vendor-reported products (2)
- checkpoint · Quantum Security Gateway
- checkpoint · Quantum Security Management