Firetruck

CVE-2026-85102

KEV
Updated Sep 23, 2026 · PUBLISHED
View KEV entry →

Description

Check Point Security Gateway and Check Point Spark Firewall using Site to Site VPN or Remote Access VPN contain an improper certificate validation vulnerability which could allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Quantum Security Gatewaycheckpoint / Quantum Security GatewayR81.20 with Jumbo Hotfix Take 165 or belowaffected
Quantum Security Gatewaycheckpoint / Quantum Security GatewayR82.10 with Jumbo Hotfix Take 43 or belowaffected
Quantum Security Gatewaycheckpoint / Quantum Security GatewayR82 with Jumbo Hotfix Take 125 or belowaffected