CVE-2026-85102

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-85102
Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://support.checkpoint.com/results/sk/sk1000117 Mitigation Patch Vendor Advisory
https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616/ Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-85102 US Government Resource
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:checkpoint:gaia_embedded:*:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:*:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:-:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004508:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004620:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004653:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004721:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004892:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004901:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004914:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004936:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:-:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998001559:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998001562:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002110:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002112:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002133:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002203:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002216:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002242:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002279:*:*:*:*:*:*
OR cpe:2.3:h:checkpoint:quantum_spark_1530:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_1535:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_1550:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_1555:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_1570:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_1570r:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_1575:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_1575r:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_1590:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_1595:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_1595r:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_1600:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_1800:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_1900:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_2000:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_2530:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_2550:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_2560:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_2570:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_2580:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_2590:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
OR cpe:2.3:o:checkpoint:gaia_os:*:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:-:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_106:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_107:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_109:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_110:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_113:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_128:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_129:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_130:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_131:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_132:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_135:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_139:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_14:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_141:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_150:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_152:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_156:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_158:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_165:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_169:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_170:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_171:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_172:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_173:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_174:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_177:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_181:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_183:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_187:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_22:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_30:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_38:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_44:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_45:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_55:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_61:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_66:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_75:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_78:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_79:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_81:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_82:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_85:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_87:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_9:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_93:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_94:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_95:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:-:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_10:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_101:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_103:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_105:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_111:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_113:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_115:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_118:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_119:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_120:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_122:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_126:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_127:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_14:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_141:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_146:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_158:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_161:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_24:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_26:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_38:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_41:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_43:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_45:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_53:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_54:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_65:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_70:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_76:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_79:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_8:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_84:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_89:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_90:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_92:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_96:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_98:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_99:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:-:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_10:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_103:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_107:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_118:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_12:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_122:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_14:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_18:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_19:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_25:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_33:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_34:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_36:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_39:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_41:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_43:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_44:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_60:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_73:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_91:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82.10:-:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82.10:take_19:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82.10:take_24:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82.10:take_36:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82.10:take_40:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82.10:take_6:*:*:*:*:*:*
OR cpe:2.3:h:checkpoint:quantum_3600:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_3800:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_force_19100:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_force_19200:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_force_29100:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_force_29200:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_force_3920:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_force_3950:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_force_3970:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_force_3980:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_force_9100:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_force_9200:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_force_9300:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_force_9400:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_force_9700:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_force_9800:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_lightspeed_mls200:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_lightspeed_mls400:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_lightspeed_qls250:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_lightspeed_qls450:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_lightspeed_qls650:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_lightspeed_qls800:-:*:*:*:*:*:*:*
History

23 Sep 2026, 18:22

Type Values Removed Values Added
CPE cpe:2.3:o:checkpoint:gaia_os:r81.10:take_81:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_61:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002203:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_1530:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_9:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:-:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_60:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_122:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_14:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_130:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_43:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004508:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_2590:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_75:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002216:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_135:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_1570r:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_172:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_141:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_3800:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_1550:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_79:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_107:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_2000:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_3600:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_84:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_force_3950:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_1575r:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004721:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82.10:take_40:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_force_9400:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_10:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_170:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_127:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_1575:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:-:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_2560:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002112:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_force_19100:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004901:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_1600:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998001559:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_14:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_106:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002279:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_131:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_45:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_force_29100:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_169:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_force_3970:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_force_9300:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_66:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004653:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_187:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_92:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004914:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002242:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_113:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_129:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_8:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82.10:take_36:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_82:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:-:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_107:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_lightspeed_qls250:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_39:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_158:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_45:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_1595:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_lightspeed_qls650:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_1570:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_12:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004936:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_122:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_70:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_73:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82.10:take_24:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_95:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_161:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_lightspeed_mls400:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_38:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_1590:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_41:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002133:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_36:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_1800:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998001562:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_41:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_44:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_118:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_173:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_force_3920:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:-:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_174:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_24:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_25:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_33:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_14:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_38:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_force_9100:-:*:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_force_9700:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82.10:take_19:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004620:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_65:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_94:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_18:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_lightspeed_mls200:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_10:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_109:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_141:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_156:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_22:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_53:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_1595r:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_183:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_158:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_1535:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_111:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82.10:take_6:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_119:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:*:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_105:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_132:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_30:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_1900:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_171:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_113:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_78:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_79:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_101:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:*:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_91:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_force_29200:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_26:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_force_3980:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_146:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_87:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_90:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_103:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_2580:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_128:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_force_9200:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_152:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_lightspeed_qls450:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_96:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_lightspeed_qls800:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_76:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r82.00.10:build_998002110:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_force_19200:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_126:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_2550:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_103:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_118:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_44:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_93:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_99:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_1555:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_34:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_120:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_165:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_embedded:r81.10.17:build_996004892:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_139:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_55:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_115:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_19:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_150:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_2570:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82:take_43:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_force_9800:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:-:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_110:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r82.10:-:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_85:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_89:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_98:*:*:*:*:*:*
cpe:2.3:h:checkpoint:quantum_spark_2530:-:*:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.20:take_54:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_181:*:*:*:*:*:*
cpe:2.3:o:checkpoint:gaia_os:r81.10:take_177:*:*:*:*:*:*
References () https://support.checkpoint.com/results/sk/sk1000117 - () https://support.checkpoint.com/results/sk/sk1000117 - Mitigation, Patch, Vendor Advisory
References () https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616/ - () https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616/ - Vendor Advisory
References () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-85102 - () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-85102 - US Government Resource
First Time Checkpoint quantum Lightspeed Mls200
Checkpoint
Checkpoint quantum Lightspeed Mls400
Checkpoint quantum Spark 2550
Checkpoint quantum Lightspeed Qls800
Checkpoint quantum Spark 1535
Checkpoint quantum 3800
Checkpoint quantum Spark 2530
Checkpoint quantum Force 19200
Checkpoint quantum Force 19100
Checkpoint quantum Spark 2580
Checkpoint quantum Force 3970
Checkpoint quantum Lightspeed Qls650
Checkpoint quantum Spark 1555
Checkpoint quantum Lightspeed Qls250
Checkpoint quantum Force 9700
Checkpoint quantum Spark 1570r
Checkpoint quantum Force 29100
Checkpoint quantum Force 29200
Checkpoint quantum Spark 1575
Checkpoint quantum Spark 1575r
Checkpoint quantum Spark 1900
Checkpoint quantum Spark 2590
Checkpoint quantum Force 3920
Checkpoint quantum Spark 1530
Checkpoint quantum Spark 2000
Checkpoint quantum Spark 1550
Checkpoint quantum Spark 2570
Checkpoint quantum Spark 1600
Checkpoint quantum 3600
Checkpoint quantum Spark 1590
Checkpoint quantum Force 3950
Checkpoint gaia Embedded
Checkpoint quantum Force 9800
Checkpoint quantum Spark 1570
Checkpoint quantum Spark 1595r
Checkpoint quantum Force 3980
Checkpoint quantum Force 9300
Checkpoint quantum Spark 1595
Checkpoint quantum Spark 2560
Checkpoint gaia Os
Checkpoint quantum Force 9400
Checkpoint quantum Spark 1800
Checkpoint quantum Lightspeed Qls450
Checkpoint quantum Force 9100
Checkpoint quantum Force 9200

22 Sep 2026, 20:17

Type Values Removed Values Added
References
  • () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-85102 -

22 Sep 2026, 18:17

Type Values Removed Values Added
References
  • () https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616/ -
Information

Published : 2026-09-09 13:20

Updated : 2026-09-23 18:22

NVD link : CVE-2026-85102

Mitre link : CVE-2026-85102

CVE.ORG link : CVE-2026-85102

JSON object : View

Products Affected

checkpoint

  • quantum_force_19200
  • quantum_force_29200
  • quantum_lightspeed_mls200
  • quantum_spark_1595r
  • quantum_force_9100
  • quantum_spark_1575r
  • quantum_force_3980
  • quantum_force_3920
  • quantum_spark_1900
  • quantum_force_9700
  • quantum_lightspeed_qls650
  • quantum_spark_1590
  • quantum_force_3950
  • quantum_force_9800
  • quantum_spark_1600
  • quantum_spark_2550
  • quantum_force_9300
  • quantum_spark_2560
  • quantum_spark_1595
  • gaia_os
  • quantum_3600
  • quantum_force_3970
  • quantum_spark_1570r
  • quantum_spark_1800
  • quantum_lightspeed_mls400
  • quantum_lightspeed_qls450
  • quantum_spark_1570
  • gaia_embedded
  • quantum_spark_1550
  • quantum_lightspeed_qls250
  • quantum_spark_2570
  • quantum_spark_1530
  • quantum_3800
  • quantum_lightspeed_qls800
  • quantum_spark_2580
  • quantum_spark_1555
  • quantum_spark_2000
  • quantum_force_19100
  • quantum_spark_2590
  • quantum_force_9400
  • quantum_spark_1535
  • quantum_spark_1575
  • quantum_force_29100
  • quantum_spark_2530
  • quantum_force_9200
CWE
CWE-295

Improper Certificate Validation