CVE-2026-85102
CRITICAL · 9.8 EPSS 0.3%Real vuln, vendor patch live, no KEV/PoC yet; mixed exploitation signal.
What: Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway (CVSS 9.8 CRITICAL) allowing unauthenticated remote code execution.
Why it matters: Check Point has released patches for this unauthenticated RCE on a critical infrastructure VPN appliance. CVSS 9.8 and vendor patch activity signal real urgency, though EPSS remains very low (0.003) and KEV listing is absent, suggesting no confirmed in-the-wild exploitation yet. Defenders managing Check Point gateways are triaging patch deployment.
Where it's seen: Social media posts link to vendor patches and mitigation guidance; chatter emphasizes patch-Tuesday urgency and manual VPN rule workarounds. No public PoC or exploitation reports detected; posts are advisory-driven rather than incident-driven.
RISK: CRITICAL — Unauthenticated RCE on VPN appliance, CVSS 9.8, vendor patching urgently.
Description
Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.
CVSS 3.1 breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H- Attack vector
- Network
- Complexity
- Low
- Privileges required
- None
- User interaction
- None
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- High
- Availability
- High