Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2026-85102 Details

Description

Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.

Metrics

CVSS 3.x Severity and Vector Strings:

CNA: [email protected]CVSS-B:9.8 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616/	CISA-ADP	Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-85102	CISA-ADP	US Government Resource
https://support.checkpoint.com/results/sk/sk1000117	[email protected]	MitigationPatchVendor Advisory

This CVE is in CISA's Known Exploited Vulnerabilities Catalog

Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.

Vulnerability Name	Date Added	Due Date	Required Action
Check Point Multiple Products Improper Certificate Validation Vulnerability	Sep 22, 2026	Sep 25, 2026	Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-295	Improper Certificate Validation	[email protected]

Affected Products

Product	Versions
checkpoint gaia embedded	>= r81.10.00, < r81.10.17 >= r82.00.00, < r82.00.10 r81.10.17 - r81.10.17 build_996004508 r81.10.17 build_996004620
CPE cpe:2.3:o:checkpoint:gaia_embedded:::::::: cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:-:::::: cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004508:::::: cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004620:::::: cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004653:::::: cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004721:::::: cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004892:::::: cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004901:::::: cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004914:::::: cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004936:::::: cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:-:::::: cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998001559:::::: cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998001562:::::: cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002110:::::: cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002112:::::: cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002133:::::: cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002203:::::: cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002216:::::: cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002242:::::: cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002279:::::: Remediation No remediation found in references.
checkpoint quantum spark 1530	All versions
CPE cpe:2.3:h:checkpoint:quantum_spark_1530:-:::::::* Remediation No remediation found in references.
checkpoint quantum spark 1535	All versions
CPE cpe:2.3:h:checkpoint:quantum_spark_1535:-:::::::* Remediation No remediation found in references.
checkpoint quantum spark 1550	All versions
CPE cpe:2.3:h:checkpoint:quantum_spark_1550:-:::::::* Remediation No remediation found in references.
checkpoint quantum spark 1555	All versions
CPE cpe:2.3:h:checkpoint:quantum_spark_1555:-:::::::* Remediation No remediation found in references.
checkpoint quantum spark 1570	All versions
CPE cpe:2.3:h:checkpoint:quantum_spark_1570:-:::::::* Remediation No remediation found in references.
checkpoint quantum spark 1570r	All versions
CPE cpe:2.3:h:checkpoint:quantum_spark_1570r:-:::::::* Remediation No remediation found in references.
checkpoint quantum spark 1575	All versions
CPE cpe:2.3:h:checkpoint:quantum_spark_1575:-:::::::* Remediation No remediation found in references.
checkpoint quantum spark 1575r	All versions
CPE cpe:2.3:h:checkpoint:quantum_spark_1575r:-:::::::* Remediation No remediation found in references.
checkpoint quantum spark 1590	All versions
CPE cpe:2.3:h:checkpoint:quantum_spark_1590:-:::::::* Remediation No remediation found in references.
checkpoint quantum spark 1595	All versions
CPE cpe:2.3:h:checkpoint:quantum_spark_1595:-:::::::* Remediation No remediation found in references.
checkpoint quantum spark 1595r	All versions
CPE cpe:2.3:h:checkpoint:quantum_spark_1595r:-:::::::* Remediation No remediation found in references.
checkpoint quantum spark 1600	All versions
CPE cpe:2.3:h:checkpoint:quantum_spark_1600:-:::::::* Remediation No remediation found in references.
checkpoint quantum spark 1800	All versions
CPE cpe:2.3:h:checkpoint:quantum_spark_1800:-:::::::* Remediation No remediation found in references.
checkpoint quantum spark 1900	All versions
CPE cpe:2.3:h:checkpoint:quantum_spark_1900:-:::::::* Remediation No remediation found in references.
checkpoint quantum spark 2000	All versions
CPE cpe:2.3:h:checkpoint:quantum_spark_2000:-:::::::* Remediation No remediation found in references.
checkpoint quantum spark 2530	All versions
CPE cpe:2.3:h:checkpoint:quantum_spark_2530:-:::::::* Remediation No remediation found in references.
checkpoint quantum spark 2550	All versions
CPE cpe:2.3:h:checkpoint:quantum_spark_2550:-:::::::* Remediation No remediation found in references.
checkpoint quantum spark 2560	All versions
CPE cpe:2.3:h:checkpoint:quantum_spark_2560:-:::::::* Remediation No remediation found in references.
checkpoint quantum spark 2570	All versions
CPE cpe:2.3:h:checkpoint:quantum_spark_2570:-:::::::* Remediation No remediation found in references.
checkpoint quantum spark 2580	All versions
CPE cpe:2.3:h:checkpoint:quantum_spark_2580:-:::::::* Remediation No remediation found in references.
checkpoint quantum spark 2590	All versions
CPE cpe:2.3:h:checkpoint:quantum_spark_2590:-:::::::* Remediation No remediation found in references.
checkpoint gaia os	>= r80, < r81.10 r81.10 - r81.10 take_106 r81.10 take_107 r81.10 take_109
CPE cpe:2.3:o:checkpoint:gaia_os:::::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:-:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_106:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_107:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_109:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_110:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_113:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_128:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_129:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_130:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_131:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_132:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_135:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_139:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_14:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_141:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_150:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_152:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_156:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_158:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_165:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_169:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_170:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_171:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_172:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_173:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_174:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_177:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_181:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_183:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_187:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_22:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_30:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_38:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_44:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_45:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_55:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_61:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_66:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_75:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_78:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_79:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_81:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_82:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_85:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_87:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_9:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_93:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_94:::::: cpe:2.3:o:checkpoint:gaia_os:r81.10:take_95:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:-:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_10:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_101:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_103:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_105:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_111:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_113:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_115:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_118:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_119:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_120:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_122:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_126:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_127:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_14:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_141:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_146:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_158:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_161:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_24:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_26:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_38:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_41:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_43:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_45:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_53:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_54:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_65:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_70:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_76:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_79:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_8:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_84:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_89:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_90:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_92:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_96:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_98:::::: cpe:2.3:o:checkpoint:gaia_os:r81.20:take_99:::::: cpe:2.3:o:checkpoint:gaia_os:r82:-:::::: cpe:2.3:o:checkpoint:gaia_os:r82:take_10:::::: cpe:2.3:o:checkpoint:gaia_os:r82:take_103:::::: cpe:2.3:o:checkpoint:gaia_os:r82:take_107:::::: cpe:2.3:o:checkpoint:gaia_os:r82:take_118:::::: cpe:2.3:o:checkpoint:gaia_os:r82:take_12:::::: cpe:2.3:o:checkpoint:gaia_os:r82:take_122:::::: cpe:2.3:o:checkpoint:gaia_os:r82:take_14:::::: cpe:2.3:o:checkpoint:gaia_os:r82:take_18:::::: cpe:2.3:o:checkpoint:gaia_os:r82:take_19:::::: cpe:2.3:o:checkpoint:gaia_os:r82:take_25:::::: cpe:2.3:o:checkpoint:gaia_os:r82:take_33:::::: cpe:2.3:o:checkpoint:gaia_os:r82:take_34:::::: cpe:2.3:o:checkpoint:gaia_os:r82:take_36:::::: cpe:2.3:o:checkpoint:gaia_os:r82:take_39:::::: cpe:2.3:o:checkpoint:gaia_os:r82:take_41:::::: cpe:2.3:o:checkpoint:gaia_os:r82:take_43:::::: cpe:2.3:o:checkpoint:gaia_os:r82:take_44:::::: cpe:2.3:o:checkpoint:gaia_os:r82:take_60:::::: cpe:2.3:o:checkpoint:gaia_os:r82:take_73:::::: cpe:2.3:o:checkpoint:gaia_os:r82:take_91:::::: cpe:2.3:o:checkpoint:gaia_os:r82.10:-:::::: cpe:2.3:o:checkpoint:gaia_os:r82.10:take_19:::::: cpe:2.3:o:checkpoint:gaia_os:r82.10:take_24:::::: cpe:2.3:o:checkpoint:gaia_os:r82.10:take_36:::::: cpe:2.3:o:checkpoint:gaia_os:r82.10:take_40:::::: cpe:2.3:o:checkpoint:gaia_os:r82.10:take_6:::::: Remediation No remediation found in references.
checkpoint quantum 3600	All versions
CPE cpe:2.3:h:checkpoint:quantum_3600:-:::::::* Remediation No remediation found in references.
checkpoint quantum 3800	All versions
CPE cpe:2.3:h:checkpoint:quantum_3800:-:::::::* Remediation No remediation found in references.
checkpoint quantum force 19100	All versions
CPE cpe:2.3:h:checkpoint:quantum_force_19100:-:::::::* Remediation No remediation found in references.
checkpoint quantum force 19200	All versions
CPE cpe:2.3:h:checkpoint:quantum_force_19200:-:::::::* Remediation No remediation found in references.
checkpoint quantum force 29100	All versions
CPE cpe:2.3:h:checkpoint:quantum_force_29100:-:::::::* Remediation No remediation found in references.
checkpoint quantum force 29200	All versions
CPE cpe:2.3:h:checkpoint:quantum_force_29200:-:::::::* Remediation No remediation found in references.
checkpoint quantum force 3920	All versions
CPE cpe:2.3:h:checkpoint:quantum_force_3920:-:::::::* Remediation No remediation found in references.
checkpoint quantum force 3950	All versions
CPE cpe:2.3:h:checkpoint:quantum_force_3950:-:::::::* Remediation No remediation found in references.
checkpoint quantum force 3970	All versions
CPE cpe:2.3:h:checkpoint:quantum_force_3970:-:::::::* Remediation No remediation found in references.
checkpoint quantum force 3980	All versions
CPE cpe:2.3:h:checkpoint:quantum_force_3980:-:::::::* Remediation No remediation found in references.
checkpoint quantum force 9100	All versions
CPE cpe:2.3:h:checkpoint:quantum_force_9100:-:::::::* Remediation No remediation found in references.
checkpoint quantum force 9200	All versions
CPE cpe:2.3:h:checkpoint:quantum_force_9200:-:::::::* Remediation No remediation found in references.
checkpoint quantum force 9300	All versions
CPE cpe:2.3:h:checkpoint:quantum_force_9300:-:::::::* Remediation No remediation found in references.
checkpoint quantum force 9400	All versions
CPE cpe:2.3:h:checkpoint:quantum_force_9400:-:::::::* Remediation No remediation found in references.
checkpoint quantum force 9700	All versions
CPE cpe:2.3:h:checkpoint:quantum_force_9700:-:::::::* Remediation No remediation found in references.
checkpoint quantum force 9800	All versions
CPE cpe:2.3:h:checkpoint:quantum_force_9800:-:::::::* Remediation No remediation found in references.
checkpoint quantum lightspeed mls200	All versions
CPE cpe:2.3:h:checkpoint:quantum_lightspeed_mls200:-:::::::* Remediation No remediation found in references.
checkpoint quantum lightspeed mls400	All versions
CPE cpe:2.3:h:checkpoint:quantum_lightspeed_mls400:-:::::::* Remediation No remediation found in references.
checkpoint quantum lightspeed qls250	All versions
CPE cpe:2.3:h:checkpoint:quantum_lightspeed_qls250:-:::::::* Remediation No remediation found in references.
checkpoint quantum lightspeed qls450	All versions
CPE cpe:2.3:h:checkpoint:quantum_lightspeed_qls450:-:::::::* Remediation No remediation found in references.
checkpoint quantum lightspeed qls650	All versions
CPE cpe:2.3:h:checkpoint:quantum_lightspeed_qls650:-:::::::* Remediation No remediation found in references.
checkpoint quantum lightspeed qls800	All versions
CPE cpe:2.3:h:checkpoint:quantum_lightspeed_qls800:-:::::::* Remediation No remediation found in references.

Change History

8 change records found show changes

Date	Action	Recorded By
Sep 23, 2026	Initial Analysis	[email protected]
Sep 23, 2026	CVE Modified	CISA-ADP
Sep 22, 2026	CVE CISA KEV Update	Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government
Sep 22, 2026	CVE Modified	CISA-ADP
Sep 22, 2026	CVE Modified	CISA-ADP
Sep 10, 2026	CVE Modified	CISA-ADP
Sep 9, 2026	CVE Modified	CISA-ADP
Sep 9, 2026	New CVE Received	[email protected]

CVE-2026-85102 Details

Description

Metrics

References to Advisories, Solutions, and Tools

This CVE is in CISA's Known Exploited Vulnerabilities Catalog

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE