CVE-2026-85103

Warnung

Medienbericht

EPSS 0.36%
Veröffentlicht 09.09.2026 13:00:42
Zuletzt bearbeitet 10.09.2026 04:18:18
Erkennungen
Login

Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding

A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.

Betroffene Produkte Warnungen 1 Metriken 2 CWE 1 Referenzen 13

CNA 2 VulnDex Vulnerability Enrichment 2

Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).

Herstellercheckpoint

≫

Produkt Quantum Security Gateway

Version R82.10 with Jumbo Hotfix Take 43 or below

Status affected

Version R82 with Jumbo Hotfix Take 125 or below

Status affected

Version R81.20 with Jumbo Hotfix Take 165 or below

Status affected

Herstellercheckpoint

≫

Produkt Quantum Security Management

Version R82.10 with Jumbo Hotfix Take 43 or below

Status affected

Version R82 with Jumbo Hotfix Take 125 or below

Status affected

Version R81.20 with Jumbo Hotfix Take 165 or below

Status affected

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

10.09.2026:

https://cert.europa.eu/publications/security-advisories/2026-012/

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.36%	0.294

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Checkpoint	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-122 Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().