CVE-2026-85102: listed in the CISA KEV catalog

CVE-2026-85102 · CVSS 9.8 CRITICAL · KEV 2026-09-22 · patch available

Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.

Is CVE-2026-85102 exploited?

• Listed in the CISA KEV catalog on 2026-09-22.
• Federal remediation due 2026-09-25.
• Past that date by 34 days.
• Public exploit code: none found in monitored sources.

Which products and versions are affected?

• checkpoint · Quantum Security Gateway · R82.10 with Jumbo Hotfix Take 43 or below, R82 with Jumbo Hotfix Take 125 or below, R81.20 with Jumbo Hotfix Take 165 or below
• checkpoint · gaia embedded · >= r81.10.00, < r81.10.17, >= r82.00.00, < r82.00.10, r81.10.17, r82.00.10
• checkpoint · gaia os · >= r80, < r81.10, r81.10, r81.20, r82, r82.10

Is there a patch?

Yes. Update to one of these or later:

From NVD's analysis

What PlainSec published about CVE-2026-85102

• Check Point VPN flaws move into exploitation window (2026-09-14)

Primary sources

• NVD record
• CISA KEV catalog
• checkpoint advisory

What this record does not say

• No EPSS score.

KEV and EPSS are re-checked daily. Record last updated 2026-09-22.