ctrlINT What the industry said about every indicator, with the quote

CVE-2026-85102Vulnerability

Check Point Multiple Products Improper Certificate Validation Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .

Reported by 10 independent sources · first reported by CISA advisories · last reported

Last reported 10 days ago

CISA KEVAdded 22 Sep 2026
Fix due 25 Sep 2026
Used by ransomware: not knownCISA KEV catalogue
EPSS54.2%
higher than 99% of CVEsFIRST EPSS, as of 23 Oct 2026

What the reports say

13 reports, newest first · the exact sentence from each
  1. “CVE-2026-85102, CVE-2026-93616”

    SOCRadarVendor
    Top RCE Vulnerabilities
  2. “CVE-2026-85102”

    Recorded FutureVendor
    September 2026 CVE Landscape
  3. “CVE-2026-85102 A certificate validation flaw in the Check Point Quantum Security Gateway allowed remote code execution without authentication.”

    AhnLab ASECVendor
    Q3 2026 Vulnerability Trend Report
  4. “The development comes as number of security flaws in Check Point (CVE-2026-85102 and CVE-2026-93616), Arista VeloCloud Orchestrator (CVE-2026-93952), F5 BIG-IP Access Policy Manager (CVE-2026-94127), Cisco Catalyst SD-WAN Manager (CVE-2026-76504), and Citrix NetScaler ADC and Net…”

    The Hacker NewsNews
    Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes
  5. “…d urgent first — CVE-2026-77179 (Docker), CVE-2026-93485, CVE-2026-87902 (WordPress), CVE-2026-89775 (Linux kernel), CVE-2026-93616, CVE-2026-85102 (Check Point), CVE-2026-93952 (Arista VeloCloud Orchestrator), CVE-2026-90898 (Bifrost), CVE-2026-86555, CVE-2026-86554, CVE-2026-86…”

    The Hacker NewsNews
    ⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats
  6. “Check Point has observed active exploitation of two critical pre-authentication vulnerabilities with CVSS scores of 9.8 – CVE-2026-85102 and CVE-2026-93616.”

    Check Point ResearchVendor
    28th September – Threat Intelligence Report
  7. “The company also confirmed that a pre-authentication remote code execution (RCE) vulnerability (CVE-2026-85102) in Check Point (Quantum) Security Gateway for which it released patches on September 9, 2026, started getting probed a few days after.”

    Help Net SecurityNews
    Week in review: Gyazo breach exposes 23.6M user data, TASK#STOMP steals documents
  8. “CVE-2026-85102 affects VPN certificate handling in Security Gateways and Spark Firewalls, while CVE-2026-93616 affects the Check Point Management web service.”

    SOCRadarVendor
    Check Point Pre-Auth Flaws Under Attack
  9. “De kwetsbaarheid met kenmerk CVE-2026-85102 heeft een CVSS-score van 9,8.”

    NCSC-NL advisoriesGovernment
    NCSC-2026-0365 [1.01] [H/H] Kwetsbaarheden verholpen in Check Point VPN-producten
  10. “[Check Point // Check Point CVE-2026-93616 // Check Point CVE-2026-85102]”

    Risky Business NewsNews
    Risky Bulletin: Network of 10,000 AI servers masks Chinese malicious activity
  11. “Check Point has reported that CVE-2026-85102 and CVE-2026-93616 are being exploited in the wild.”

    Canadian Centre for Cyber SecurityGovernment
    Check Point security advisory (AV26-902) – Update 2
  12. “The attempts, against a flaw tracked as CVE-2026-85102, have targeted customers of Spark, Check Point's firewall line for small businesses.”

    The Hacker NewsNews
    Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks
  13. “CVE-2026-85102 Check Point Multiple Products Improper Certificate Validation Vulnerability”

    CISA advisoriesGovernment
    CISA Adds Four Known Exploited Vulnerabilities to Catalog

Indicators reported together

named in the same reports
Copy this indicator · defanged

Also named with it: CVE-2026-93616, CVE-2026-94127, CVE-2026-87902, CVE-2026-93952, CVE-2026-88771, CVE-2026-88772, CVE-2026-85103, CVE-2026-60004, CVE-2026-76460, CVE-2026-76461, CVE-2026-5430, CVE-2026-85706, CVE-2026-7273, CVE-2026-84869, CVE-2026-86296, CVE-2026-76504, CVE-2026-104286, CVE-2026-33824, CVE-2022-0847

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2026-85102 here?
No account needed. We do not store your IP address.