ZeroDay Findings
Sign inSign up

Findings

CVE-2026-85102

Check Point Multiple Products Improper Certificate Validation Vulnerability

Published Sep 9, 2026 · updated Sep 23, 2026 · Check Point Multiple Products

Check Point Security Gateway and Check Point Spark Firewall using Site to Site VPN or Remote Access VPN contain an improper certificate validation vulnerability which could allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.

Timeline

Detection, updates, and resolution for this record.

  1. Sep 9, 2026 · Catalog

    Detected

    Check Point Security Gateway and Check Point Spark Firewall using Site to Site VPN or Remote Access VPN contain an improper certificate validation vulnerability which could allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.

  2. Sep 22, 2026 · CISA KEV

    Known exploited

    Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating

  3. Sep 23, 2026 · Catalog

    Updated

    Check Point Security Gateway and Check Point Spark Firewall using Site to Site VPN or Remote Access VPN contain an improper certificate validation vulnerability which could allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.

  4. Sep 25, 2026 · CISA KEV

    Remediation due

    Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating

Required action

Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

CISA due date Sep 25, 2026

Affected

  • cpe checkpoint/gaia embeddedversion unspecified
  • cpe checkpoint/gaia embeddedr81.10.17
  • cpe checkpoint/gaia osversion unspecified
  • vendor Check Point Multiple Productsversion unspecified

Sources

  • CISA KEVCVE-2026-85102

    Check Point Security Gateway and Check Point Spark Firewall using Site to Site VPN or Remote Access VPN contain an improper certificate validation vulnerability which could allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.

    cisa.gov
  • CVE.orgCVE-2026-85102

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2026-85102

    30-day exploitation probability 7.5%

    first.org
  • NIST NVDCVE-2026-85102

    Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.

    nvd.nist.gov

References