First published 9/27/2026, 6:36:15 AM · Last updated 9/27/2026, 6:36:15 AM

CVE-2026-85102: Check Point Multiple Products Improper Certificate Validation Vulnerability

An improper certificate validation flaw in Check Point Security Gateway and Check Point Spark Firewall used with Site-to-Site or Remote Access VPN could allow an unauthenticated remote attacker to execute arbitrary code on the Gateway. The notice requires applying vendor mitigations and following CISA’s BOD 26-04 patching and forensics triage guidance or discontinuing use if mitigations are unavailable.

Categories: technology

Generated scores

Scores are based on the cited reporting and use a 1–10 scale. Read the methodology.

Confidence: 6/10How certain the assessment is based on the clarity and evidence in the cited reporting.
Geographic reach: 4/10How widely the event reaches, from a local area (1) to worldwide impact (10).
Global importance: 3/10The event's broader significance, from limited importance (1) to major global importance (10).
Impact magnitude: 4/10The scale or severity of the real-world impact, from minor (1) to extreme (10).
Positivity: 2/10How harmful or beneficial the event is, from strongly harmful (1) to strongly positive (10).
Urgency: 6/10How time-sensitive the event is, from low urgency (1) to immediate attention needed (10).

Why it matters

The vulnerability enables unauthenticated remote execution of arbitrary code on gateway devices, and CISA directs stakeholders to mitigate or discontinue use.

Location

Sources

CVE-2026-85102: Check Point Multiple Products Improper Certificate Validation Vulnerability

Report an issue