CVE-2026-85102

Name of the Vulnerable Software and Affected Versions Check Point Quantum Security Gateway (affected versions not specified) Check Point Security Gateway (affected versions not specified) Check Point Spark Firewall (affected versions not specified) Check Point Quantum Security Management (affected versions not specified)

Description An improper certificate trust validation issue exists during VPN negotiation. The flaw stems from a buffer overflow that occurs when decoding VPN certificates in ASN.1 format (Abstract Syntax Notation One, a standard for encoding data structures). This allows an unauthenticated remote attacker to execute arbitrary code on the appliance during the pre-authentication flow, before credentials or access controls are evaluated. Real-world exploitation has been observed, with attackers using malformed certificate parameters to trigger unauthorized VPN sessions and subsequently performing internal LDAP and LDAPS scanning from the gateway interface.

Recommendations Apply LivePatch Take 24 for Security Gateways. Update Spark devices to the specific builds provided by the vendor. Audit session logs for unexpected directory probes to identify potential compromises.