CVE-2026-85103
On 9 September 2026, Check Point released emergency security updates addressing two critical vulnerabilities affecting Check Point Security Gateway, Security Management Server, and Spark Firewall deployments configured to use Remote Access VPN or Site-to-Site VPN. Both vulnerabilities carry a CVSS score of 9.8 and could allow an unauthenticated, remote attacker to execute arbitrary code on affected appliances. CERT-EU strongly recommends applying the available hotfixes as soon as possible, prioritising internet-facing and perimeter appliances.
⚡ Watch CVE-2026-85103
Get an email if CVE-2026-85103 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.
Advisory coverage (5)
- high[NEU] [hoch] Check Point Security Gateway, Spark Firewall und Security Management: Mehrere Schwachstellen ermö…cert-bund · 2026-09-10
- unknownNCSC-2026-0365 [1.00] [H/H] Kwetsbaarheden verholpen in Check Point VPN productenncsc-nl · 2026-09-10
- critical2026-012: Critical Vulnerabilities in Check Point Productscert-eu · 2026-09-10
- unknownCheck Point security advisory (AV26-902)cccs · 2026-09-09
- criticalCVE-2026-85103: A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated re…nvd · 2026-09-09
External references
Embed the live status
— this badge updates automatically when the KEV or exploit status changes. How to embed it →
[](https://www.csirts.com/cve/CVE-2026-85103)