CVE-2026-85103

9.8 criticalEPSS 4.3%

Critical (9.8). EPSS 4.3% chance of exploitation in the next 30 days.

A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 4.3% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE: CWE-122
Published: 2026-09-09
Modified: 2026-09-10
Record from: the NVD, synced 2026-10-19

References

https://support.checkpoint.com/results/sk/sk1000118

Check your stack JSON