CVE-2026-85102Vulnerability
Check Point Multiple Products Improper Certificate Validation Vulnerability
Reported by 10 independent sources · first reported by CISA advisories · last reported
Last reported 10 days ago
Fix due 25 Sep 2026
Used by ransomware: not knownCISA KEV catalogue
higher than 99% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
13 reports, newest first · the exact sentence from each-
Top RCE Vulnerabilities“CVE-2026-85102, CVE-2026-93616”
-
September 2026 CVE Landscape“CVE-2026-85102”
-
Q3 2026 Vulnerability Trend Report“CVE-2026-85102 A certificate validation flaw in the Check Point Quantum Security Gateway allowed remote code execution without authentication.”
-
Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes“The development comes as number of security flaws in Check Point (CVE-2026-85102 and CVE-2026-93616), Arista VeloCloud Orchestrator (CVE-2026-93952), F5 BIG-IP Access Policy Manager (CVE-2026-94127), Cisco Catalyst SD-WAN Manager (CVE-2026-76504), and Citrix NetScaler ADC and Net…”
-
⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats“…d urgent first — CVE-2026-77179 (Docker), CVE-2026-93485, CVE-2026-87902 (WordPress), CVE-2026-89775 (Linux kernel), CVE-2026-93616, CVE-2026-85102 (Check Point), CVE-2026-93952 (Arista VeloCloud Orchestrator), CVE-2026-90898 (Bifrost), CVE-2026-86555, CVE-2026-86554, CVE-2026-86…”
-
28th September – Threat Intelligence Report“Check Point has observed active exploitation of two critical pre-authentication vulnerabilities with CVSS scores of 9.8 – CVE-2026-85102 and CVE-2026-93616.”
-
Week in review: Gyazo breach exposes 23.6M user data, TASK#STOMP steals documents“The company also confirmed that a pre-authentication remote code execution (RCE) vulnerability (CVE-2026-85102) in Check Point (Quantum) Security Gateway for which it released patches on September 9, 2026, started getting probed a few days after.”
-
Check Point Pre-Auth Flaws Under Attack“CVE-2026-85102 affects VPN certificate handling in Security Gateways and Spark Firewalls, while CVE-2026-93616 affects the Check Point Management web service.”
-
NCSC-2026-0365 [1.01] [H/H] Kwetsbaarheden verholpen in Check Point VPN-producten“De kwetsbaarheid met kenmerk CVE-2026-85102 heeft een CVSS-score van 9,8.”
-
Risky Bulletin: Network of 10,000 AI servers masks Chinese malicious activity“[Check Point // Check Point CVE-2026-93616 // Check Point CVE-2026-85102]”
-
Check Point security advisory (AV26-902) – Update 2“Check Point has reported that CVE-2026-85102 and CVE-2026-93616 are being exploited in the wild.”
-
Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks“The attempts, against a flaw tracked as CVE-2026-85102, have targeted customers of Spark, Check Point's firewall line for small businesses.”
-
CISA Adds Four Known Exploited Vulnerabilities to Catalog“CVE-2026-85102 Check Point Multiple Products Improper Certificate Validation Vulnerability”
Indicators reported together
named in the same reports- fbijobs[.]govin 2 reports
Copy this indicator · defanged
Also named with it: CVE-2026-93616, CVE-2026-94127, CVE-2026-87902, CVE-2026-93952, CVE-2026-88771, CVE-2026-88772, CVE-2026-85103, CVE-2026-60004, CVE-2026-76460, CVE-2026-76461, CVE-2026-5430, CVE-2026-85706, CVE-2026-7273, CVE-2026-84869, CVE-2026-86296, CVE-2026-76504, CVE-2026-104286, CVE-2026-33824, CVE-2022-0847
Thanks — we review every report.