CVE-2026-85102 — Improper Certificate Validation in Quantum Security Gateway

Description (CNA)

Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.

Affected (CNA)

Vendor / product	Versions
checkpoint / Quantum Security Gateway	affected R82.10 with Jumbo Hotfix Take 43 or below; affected R82 with Jumbo Hotfix Take 125 or below; affected R81.20 with Jumbo Hotfix Take 165 or below

CWE

CWE-295

References

https://support.checkpoint.com/results/sk/sk1000117

ADP enrichment

CISA-ADP

No English description supplied.

https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616/
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-85102