CVE-2026-85103

critical · 9.8

A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.

9.8

CVSS

4.3%

EPSS (exploit prob.)

91st

EPSS percentile

2026-09-09

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-122

References

https://support.checkpoint.com/results/sk/sk1000118

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-85103