CVE-2026-85102: Check Point Multiple Products Improper Certificate Validation Vulnerability
Published Sep 9, 2026
·Updated
Check Point Security Gateway and Check Point Spark Firewall using Site to Site VPN or Remote Access VPN contain an improper certificate validation vulnerability which could allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.
Other sources
Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.
— MITRE
Affected Software
182 affected components
Check Point Quantum Security Gateway
Check Point Multiple Products
All of the following
Any of the following
Checkpoint Gaia Embedded>=r81.10.00<r81.10.17
Checkpoint Gaia Embedded>=r82.00.00<r82.00.10
Checkpoint Gaia Embedded=r81.10.17
Checkpoint Gaia Embedded=r81.10.17-build_996004508
Checkpoint Gaia Embedded=r81.10.17-build_996004620
Checkpoint Gaia Embedded=r81.10.17-build_996004653
Checkpoint Gaia Embedded=r81.10.17-build_996004721
Checkpoint Gaia Embedded=r81.10.17-build_996004892
Checkpoint Gaia Embedded=r81.10.17-build_996004901
Checkpoint Gaia Embedded=r81.10.17-build_996004914
Checkpoint Gaia Embedded=r81.10.17-build_996004936
Checkpoint Gaia Embedded=r82.00.10
Checkpoint Gaia Embedded=r82.00.10-build_998001559
Checkpoint Gaia Embedded=r82.00.10-build_998001562
Checkpoint Gaia Embedded=r82.00.10-build_998002110
Checkpoint Gaia Embedded=r82.00.10-build_998002112
Checkpoint Gaia Embedded=r82.00.10-build_998002133
Checkpoint Gaia Embedded=r82.00.10-build_998002203
Checkpoint Gaia Embedded=r82.00.10-build_998002216
Checkpoint Gaia Embedded=r82.00.10-build_998002242
Checkpoint Gaia Embedded=r82.00.10-build_998002279
Any of the following
Checkpoint Quantum Spark 1530
Checkpoint Quantum Spark 1535
Checkpoint Quantum Spark 1550
Checkpoint Quantum Spark 1555
Checkpoint Quantum Spark 1570
Checkpoint Quantum Spark 1570r
Checkpoint Quantum Spark 1575
Checkpoint Quantum Spark 1575r
Checkpoint Quantum Spark 1590
Checkpoint Quantum Spark 1595
Checkpoint Quantum Spark 1595r
Checkpoint Quantum Spark 1600
Checkpoint Quantum Spark 1800
Checkpoint Quantum Spark 1900
Checkpoint Quantum Spark 2000
Checkpoint Quantum Spark 2530
Checkpoint Quantum Spark 2550
Checkpoint Quantum Spark 2560
Checkpoint Quantum Spark 2570
Checkpoint Quantum Spark 2580
Checkpoint Quantum Spark 2590
All of the following
Any of the following
Checkpoint Gaia Os>=r80<r81.10
Checkpoint Gaia Os=r81.10
Checkpoint Gaia Os=r81.10-take_106
Checkpoint Gaia Os=r81.10-take_107
Checkpoint Gaia Os=r81.10-take_109
Checkpoint Gaia Os=r81.10-take_110
Checkpoint Gaia Os=r81.10-take_113
Checkpoint Gaia Os=r81.10-take_128
Checkpoint Gaia Os=r81.10-take_129
Checkpoint Gaia Os=r81.10-take_130
Checkpoint Gaia Os=r81.10-take_131
Checkpoint Gaia Os=r81.10-take_132
Checkpoint Gaia Os=r81.10-take_135
Checkpoint Gaia Os=r81.10-take_139
Checkpoint Gaia Os=r81.10-take_14
Checkpoint Gaia Os=r81.10-take_141
Checkpoint Gaia Os=r81.10-take_150
Checkpoint Gaia Os=r81.10-take_152
Checkpoint Gaia Os=r81.10-take_156
Checkpoint Gaia Os=r81.10-take_158
Checkpoint Gaia Os=r81.10-take_165
Checkpoint Gaia Os=r81.10-take_169
Checkpoint Gaia Os=r81.10-take_170
Checkpoint Gaia Os=r81.10-take_171
Checkpoint Gaia Os=r81.10-take_172
Checkpoint Gaia Os=r81.10-take_173
Checkpoint Gaia Os=r81.10-take_174
Checkpoint Gaia Os=r81.10-take_177
Checkpoint Gaia Os=r81.10-take_181
Checkpoint Gaia Os=r81.10-take_183
Checkpoint Gaia Os=r81.10-take_187
Checkpoint Gaia Os=r81.10-take_22
Checkpoint Gaia Os=r81.10-take_30
Checkpoint Gaia Os=r81.10-take_38
Checkpoint Gaia Os=r81.10-take_44
Checkpoint Gaia Os=r81.10-take_45
Checkpoint Gaia Os=r81.10-take_55
Checkpoint Gaia Os=r81.10-take_61
Checkpoint Gaia Os=r81.10-take_66
Checkpoint Gaia Os=r81.10-take_75
Checkpoint Gaia Os=r81.10-take_78
Checkpoint Gaia Os=r81.10-take_79
Checkpoint Gaia Os=r81.10-take_81
Checkpoint Gaia Os=r81.10-take_82
Checkpoint Gaia Os=r81.10-take_85
Checkpoint Gaia Os=r81.10-take_87
Checkpoint Gaia Os=r81.10-take_9
Checkpoint Gaia Os=r81.10-take_93
Checkpoint Gaia Os=r81.10-take_94
Checkpoint Gaia Os=r81.10-take_95
Checkpoint Gaia Os=r81.20
Checkpoint Gaia Os=r81.20-take_10
Checkpoint Gaia Os=r81.20-take_101
Checkpoint Gaia Os=r81.20-take_103
Checkpoint Gaia Os=r81.20-take_105
Checkpoint Gaia Os=r81.20-take_111
Checkpoint Gaia Os=r81.20-take_113
Checkpoint Gaia Os=r81.20-take_115
Checkpoint Gaia Os=r81.20-take_118
Checkpoint Gaia Os=r81.20-take_119
Checkpoint Gaia Os=r81.20-take_120
Checkpoint Gaia Os=r81.20-take_122
Checkpoint Gaia Os=r81.20-take_126
Checkpoint Gaia Os=r81.20-take_127
Checkpoint Gaia Os=r81.20-take_14
Checkpoint Gaia Os=r81.20-take_141
Checkpoint Gaia Os=r81.20-take_146
Checkpoint Gaia Os=r81.20-take_158
Checkpoint Gaia Os=r81.20-take_161
Checkpoint Gaia Os=r81.20-take_24
Checkpoint Gaia Os=r81.20-take_26
Checkpoint Gaia Os=r81.20-take_38
Checkpoint Gaia Os=r81.20-take_41
Checkpoint Gaia Os=r81.20-take_43
Checkpoint Gaia Os=r81.20-take_45
Checkpoint Gaia Os=r81.20-take_53
Checkpoint Gaia Os=r81.20-take_54
Checkpoint Gaia Os=r81.20-take_65
Checkpoint Gaia Os=r81.20-take_70
Checkpoint Gaia Os=r81.20-take_76
Checkpoint Gaia Os=r81.20-take_79
Checkpoint Gaia Os=r81.20-take_8
Checkpoint Gaia Os=r81.20-take_84
Checkpoint Gaia Os=r81.20-take_89
Checkpoint Gaia Os=r81.20-take_90
Checkpoint Gaia Os=r81.20-take_92
Checkpoint Gaia Os=r81.20-take_96
Checkpoint Gaia Os=r81.20-take_98
Checkpoint Gaia Os=r81.20-take_99
Checkpoint Gaia Os=r82
Checkpoint Gaia Os=r82-take_10
Checkpoint Gaia Os=r82-take_103
Checkpoint Gaia Os=r82-take_107
Checkpoint Gaia Os=r82-take_118
Checkpoint Gaia Os=r82-take_12
Checkpoint Gaia Os=r82-take_122
Checkpoint Gaia Os=r82-take_14
Checkpoint Gaia Os=r82-take_18
Checkpoint Gaia Os=r82-take_19
Checkpoint Gaia Os=r82-take_25
Checkpoint Gaia Os=r82-take_33
Checkpoint Gaia Os=r82-take_34
Checkpoint Gaia Os=r82-take_36
Checkpoint Gaia Os=r82-take_39
Checkpoint Gaia Os=r82-take_41
Checkpoint Gaia Os=r82-take_43
Checkpoint Gaia Os=r82-take_44
Checkpoint Gaia Os=r82-take_60
Checkpoint Gaia Os=r82-take_73
Checkpoint Gaia Os=r82-take_91
Checkpoint Gaia Os=r82.10
Checkpoint Gaia Os=r82.10-take_19
Checkpoint Gaia Os=r82.10-take_24
Checkpoint Gaia Os=r82.10-take_36
Checkpoint Gaia Os=r82.10-take_40
Checkpoint Gaia Os=r82.10-take_6
Any of the following
Checkpoint Quantum 3600
Checkpoint Quantum 3800
Checkpoint Quantum Force 19100
Checkpoint Quantum Force 19200
Checkpoint Quantum Force 29100
Checkpoint Quantum Force 29200
Checkpoint Quantum Force 3920
Checkpoint Quantum Force 3950
Checkpoint Quantum Force 3970
Checkpoint Quantum Force 3980
Checkpoint Quantum Force 9100
Checkpoint Quantum Force 9200
Checkpoint Quantum Force 9300
Checkpoint Quantum Force 9400
Checkpoint Quantum Force 9700
Checkpoint Quantum Force 9800
Checkpoint Quantum Lightspeed Mls200
Checkpoint Quantum Lightspeed Mls400
Checkpoint Quantum Lightspeed Qls250
Checkpoint Quantum Lightspeed Qls450
Checkpoint Quantum Lightspeed Qls650
Checkpoint Quantum Lightspeed Qls800
Event History
Sep 9, 2026
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:20 PM
RemedyDescriptionSeverityWeaknessAffected Software
Sep 22, 2026
Known Exploited
via CISA·12:00 AM
Data Sourced
via CISA·12:00 AM
RemedyDescriptionAffected Software
Frequently Asked Questions
1
Who can exploit this issue?
An unauthenticated remote attacker may be able to exploit the issue during VPN negotiation. No user interaction or prior privileges are required according to the provided severity vector.
2
What security impact could successful exploitation have?
Successful exploitation may allow arbitrary code execution on the Check Point Quantum Security Gateway. The severity vector indicates potential high impact to confidentiality, integrity, and availability.