# CVE-2026-85102: Check Point Multiple Products Improper Certificate Validation Vulnerability

- Exploited (CISA KEV): yes, added 2026-09-22
- Published: 2026-09-09
- CVSS: 9.8 CRITICAL (v3.1)
- EPSS: 54.1% (99th percentile)
- CWE: CWE-295

Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.

## Edge WAF coverage (claimed by vendors, not measured)

| Vendor | Status | First rule | Days after publication |
|---|---|---|---|
| Cloudflare | No public claim | — | — |
| AWS | No public claim | — | — |
| Microsoft Azure | No public claim | — | — |
| Google Cloud | No public claim | — | — |
| Fastly | Before feed history | — | — |
| F5 | No public claim | — | — |
| Akamai | No public source | — | — |
| OWASP CRS | No public claim | — | — |

## Social

4 posts seen since 2026-11-02.

- bluesky 2026-11-02: Check Point just dropped emergency hotfixes for two critical CVSS 9.8 RCE flaws impacting VPN setups.  Secure your network now by reading the full details here: https://itstck.com/check-point-vpn-rce-cve-2026-85102-cve-2026-85103/  #CyberSecurity #InfoSec (https://bsky.app/profile/itstck.com/post/3mzegthnj2a2w)
- bluesky 2026-11-02: Emergency hotfixes are out for critical CVSS 9.8 RCE flaws affecting Check Point VPN gateways and servers (CVE-2026-85102 & CVE-2026-85103). Patch immediately! https://itstck.com/check-point-vpn-rce-cve-2026-85102-cve-2026-85103/ #CyberSecurity #InfoSec (https://bsky.app/profile/itstck.com/post/3mzegpschbe2p)
- bluesky 2026-11-02: {   "post": "Critical alert! Check Point patched two CVSS 9.8 RCE flaws affecting VPN gateways and management servers. Emergency hotfixes are out—patch now! https://itstck.com/check-point-vpn-rce-cve-2026-85102-cve-2026-85103/ #CyberSecurity #InfoSec" } (https://bsky.app/profile/itstck.com/post/3mzegjktok62d)
- bluesky 2026-11-02: {   "post": "Critical alert! Check Point patched two CVSS 9.8 RCE flaws affecting VPN gateways and management servers. Emergency hotfixes are out—patch now! https://itstck.com/check-point-vpn-rce-cve-2026-85102-cve-2026-85103/ #CyberSecurity #InfoSec" } (https://bsky.app/profile/itstck.com/post/3mzeghskrn62d)

"No public claim" means no vendor statement names this CVE; "Before feed history" means the CVE is older than the vendor feed. In both cases generic rules may still block it.

HTML: https://cve.vigilbase.com/cve/CVE-2026-85102 · JSON: https://cve.vigilbase.com/api/v1/cves/CVE-2026-85102