CVE-2026-85102

CISA KEV

ACT NOW Priority: 0.00 BB Relevance: 10/100

Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Check Point Security Gateway and Check Point Spark Firewall using Site to Site VPN or Remote Access VPN contain an improper certificate validation vulnerability which could allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.

CISA Known Exploited Vulnerability

Vendor / Product Check Point — Multiple Products

Date Added 2026-09-22

Remediation Due 2026-09-25

https://support.checkpoint.com/results/sk/sk1000117 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-85102

Weakness Classification (1)

CWE-295

Affected Software (137)

Vendor	Product	Version
checkpoint	gaia_embedded	r81.10.00 – r81.10.17
checkpoint	gaia_embedded	r82.00.00 – r82.00.10
checkpoint	gaia_embedded	r81.10.17
checkpoint	gaia_embedded	r81.10.17
checkpoint	gaia_embedded	r81.10.17
checkpoint	gaia_embedded	r81.10.17
checkpoint	gaia_embedded	r81.10.17
checkpoint	gaia_embedded	r81.10.17
checkpoint	gaia_embedded	r81.10.17
checkpoint	gaia_embedded	r81.10.17
checkpoint	gaia_embedded	r81.10.17
checkpoint	gaia_embedded	r82.00.10
checkpoint	gaia_embedded	r82.00.10
checkpoint	gaia_embedded	r82.00.10
checkpoint	gaia_embedded	r82.00.10
checkpoint	gaia_embedded	r82.00.10
checkpoint	gaia_embedded	r82.00.10
checkpoint	gaia_embedded	r82.00.10
checkpoint	gaia_embedded	r82.00.10
checkpoint	gaia_embedded	r82.00.10
checkpoint	gaia_embedded	r82.00.10
checkpoint	gaia_os	r80 – r81.10
checkpoint	gaia_os	r81.10
checkpoint	gaia_os	r81.10
checkpoint	gaia_os	r81.10
checkpoint	gaia_os	r81.10
checkpoint	gaia_os	r81.10
checkpoint	gaia_os	r81.10
checkpoint	gaia_os	r81.10
checkpoint	gaia_os	r81.10