CVE-2026-85102CriticalKEVZero-Day

CVE-2026-85102

Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.

TCL Priority

CVSS

9.8

EPSS

KEV

Yes

Exploitation

reported

Timeline

CVE Published
53d ago · NVD
Added to TCL Advisory
39d ago · TCL Advisory
Added to CISA KEV
39d ago · CISA
Exploitation Status Changed
39d ago · TCL Advisory

What Changed?

Exploitationunknown→reportedcisa_kev

KEVNO→YEScisa_kev

Sources

NVD · Updated 39d ago

CISA KEV · Updated 40d ago

References

cve@checkpoint.com 134c704f-9b21-4f2e-91b3-4a467353bcc0 134c704f-9b21-4f2e-91b3-4a467353bcc0