{"vulnerability": "CVE-2026-85103", "sightings": [{"uuid": "9a5d63e3-0db7-475a-9da0-b488457b4a83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0365", "content": "", "creation_timestamp": "2026-09-10T12:15:05.636790Z"}, {"uuid": "5029cffd-645e-4c2a-8144-55d9aee7f22b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85103", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117241323457387871", "content": "CRITICAL CVE-2026-85103 in Check Point Quantum Security Gateway: Heap-based buffer overflow in VPN certificate ASN.1 decoding allows unauthenticated RCE. Patch pending \u2014 monitor vendor. https://radar.offseq.com/threat/cve-2026-85103-cwe-122-heap-based-buffer-overflow-in-checkpoint-quantum-security-gateway-769c0bcac8d0fa47 #OffSeq #CheckPoint #infosec #Vuln", "creation_timestamp": "2026-09-09T13:30:24.810618Z"}, {"uuid": "faa0dff4-9b78-4568-90ea-69b3a64ceb23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85103", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mv3nhdl63x25", "content": "Check Point Quantum Security Gateway hit by CRITICAL heap overflow (CVE-2026-85103): unauthenticated RCE possible. No patch yet \u2014 watch vendor advisories. https://radar.offseq.com/threat/cve-2026-85103-cwe-122-heap-based-buffer-overflow-in-checkpoint-quantum-security-gateway-769c0bcac8d0fa47 #Off...", "creation_timestamp": "2026-09-09T13:30:28.611444Z"}, {"uuid": "b9b5e329-be28-45e3-933e-9188afbfa291", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv3pka2oli2r", "content": "\ud83d\udea8 CVE-2026-85103 \u2014 CVSS 9.8 CRITICAL\n\nA heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85103\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-09T14:07:50.751049Z"}, {"uuid": "2e4de0ca-ff3d-4960-9085-1498a018ad59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85103", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117241880862091037", "content": "It has been :zero_percent: days since an ASN.1 decoding vuln.\nIt has been :zero_percent: days since an overflow vuln in a corp VPN.\nIt has been :zero_percent: days since a vuln with \"Quantum\" in the system name.\nThey are all the same vuln.\nhttps://nvd.nist.gov/vuln/detail/cve-2026-85103\n\nA heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.", "creation_timestamp": "2026-09-09T15:52:10.377143Z"}, {"uuid": "d6e38ba8-5f9c-40cc-af0d-7306f569f03c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/check-point-security-advisory-av26-902", "content": "", "creation_timestamp": "2026-09-09T20:15:07.153055Z"}, {"uuid": "f8b2f9c8-dc44-40fb-b287-00216ab16255", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv53st2kb22b", "content": "CVE-2026-85103 - quantum security gateway\nThe certificate handling in Check Point Quantum Security Management and Gateway can be tricked into writing past the intended memory area. This could let an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#checkpoint #CVE #infosec", "creation_timestamp": "2026-09-10T03:20:03.903987Z"}, {"uuid": "9ee4d13c-4fbd-4ce6-85f2-14b24456828f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/140d43d1-bdc2-4018-832d-734f90b8eb15", "content": "", "creation_timestamp": "2026-09-10T07:40:54.728549Z"}, {"uuid": "b6a609bb-a31d-454f-8659-baf210aab5c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117245882514956478", "content": "A lot of offensive activities were identified targeting Check Point Quantum Security Gateway and Quantum Security Management (CVE-2026-85103) https://vuldb.com/vuln/401701/cti", "creation_timestamp": "2026-09-10T08:49:50.216182Z"}, {"uuid": "d4d8cb9e-4a63-4ba3-9d6c-863c47a14eab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://www.ncsc.nl/alerts/kritieke-kwetsbaarheden-in-check-point-vpn-producten-met-actief-misbruik-verwacht-update-nu", "content": "", "creation_timestamp": "2026-09-10T12:15:09.969756Z"}, {"uuid": "63b1cffc-e7f7-4b14-b918-aa2d2fcee475", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mv62pcqdno2i", "content": "~Certeu~\nUnauthenticated remote code execution affects Check Point VPN appliances; apply hotfixes immediately.\n-\nIOCs: CVE-2026-85102, CVE-2026-85103\n-\n#CVE202685102 #CVE202685103 #ThreatIntel", "creation_timestamp": "2026-09-10T12:32:52.136711Z"}, {"uuid": "9ee7698a-b9d1-49de-93b2-9ad700d01b64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://t.me/thehackernews/10024", "content": "\u203c\ufe0f Check Point patched two critical VPN certificate flaws, CVE-2026-85102 and CVE-2026-85103, that could allow unauthenticated RCE under specific, undisclosed conditions.\n\nBoth carry CVSS 9.8 scores.\n\nWhat\u2019s affected and how to fix it: https://thehackernews.com/2026/09/check-point-discloses-two-98-rated-vpn.html", "creation_timestamp": "2026-09-10T14:00:04.794751Z"}, {"uuid": "48ec9cab-3bdc-485f-8354-7f6323132237", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mv6bajxkxg2f", "content": "CVE-2026-85103 is trending. Hype score 18, currently #2 on cvemon.\n\nA heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-85103", "creation_timestamp": "2026-09-10T14:29:52.328893Z"}, {"uuid": "c0bf7855-e2b5-4002-88dd-2a4f734fd62b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mv6gtzdqe72t", "content": "\ud83d\udd17 CVE : CVE-2026-85102, CVE-2026-85103", "creation_timestamp": "2026-09-10T16:10:14.611192Z"}, {"uuid": "1d30ab38-64fa-4cf0-ad1c-a246dbf28242", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://t.me/CyberDispatch/2891", "content": "Check Point patched two critical VPN certificate flaws, CVE-2026-85102 and CVE-2026-85103, that could allow unauthenticated RCE under specific, undisclosed conditions.\n\nBoth carry CVSS 9.8 scores.", "creation_timestamp": "2026-09-11T01:00:03.587145Z"}, {"uuid": "102288fe-8dc7-4066-bde3-fdd56887ed56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://t.me/thehackernews/10024", "content": "\u203c\ufe0f Check Point patched two critical VPN certificate flaws, CVE-2026-85102 and CVE-2026-85103, that could allow unauthenticated RCE under specific, undisclosed conditions.\n\nBoth carry CVSS 9.8 scores.\n\nWhat\u2019s affected and how to fix it: https://thehackernews.com/2026/09/check-point-discloses-two-98-rated-vpn.html", "creation_timestamp": "2026-09-11T00:00:36.011299Z"}, {"uuid": "61791e5e-8a7f-44db-8941-09dcfceba7ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0365", "content": "Check Point heeft 2 kritieke kwetsbaarheden verholpen. De kwetsbaarheid met kenmerk CVE-2026-85102 heeft een CVSS-score van 9,8. De kwetsbaarheid bevindt zich in het VPN-onderhandelingsproces van de Quantum Security Gateway en wordt veroorzaakt door onjuiste validatie van certificaatvertrouwen. Hierdoor kan een niet-geauthenticeerde externe aanvaller authenticatiecontroles omzeilen en willekeurige code uitvoeren op de Security Gateway. Exploitatie vindt plaats tijdens de VPN-onderhandeling, waarbij certificaatgegevens onvoldoende worden gevalideerd.  De kwetsbaarheid geldt voor Security Gateway en Check Point Spark Firewall wanneer Site-to-Site VPN of Remote Access VPN wordt gebruikt.  \nVoor Site-to-Site VPN adviseert Check Point om implied rules for VPN uit te schakelen en VPN-toegang voor UDP/500 en UDP/4500 alleen expliciet toe te staan voor de specifieke peer-IP-adressen. Deze mitigatie is niet van toepassing op lokaal beheerde Spark Firewalls.\n\nDe kwetsbaarheid met kenmerk CVE-2026-85103 heeft een CVSS-score van 9,8. Het betreft een heap-based buffer overflow in de ASN.1-decoding van VPN-certificaten, veroorzaakt door onjuiste verwerking van ASN.1-datastructuren tijdens de certificaatverwerking. Een niet-geauthenticeerde externe aanvaller kan deze kwetsbaarheid misbruiken om willekeurige code uit te voeren op het getroffen systeem. De kwetsbaarheid bevindt zich in een component die onderdeel is van de VPN-infrastructuur en kan bij succesvolle exploitatie de vertrouwelijkheid, integriteit en beschikbaarheid van het getroffen systeem be\u00efnvloeden.\n\nHet NCSC verwacht dat op korte termijn pogingen tot grootschalig misbruik zullen plaatsvinden en roept organisaties op de advisory van Check Point met spoed op te volgen.", "creation_timestamp": "2026-09-11T01:00:35.415397Z"}, {"uuid": "c04b899e-e5ee-452c-9491-b426c3f7b182", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mv7noz24i724", "content": "Check Point patched two critical VPN certificate flaws, CVE-2026-85102 and CVE-2026-85103, that could enable unauthenticated RCE on Security Gateway and Management systems under specific conditions. #CheckPoint #VPNFlaws #RCE", "creation_timestamp": "2026-09-11T03:45:23.365310Z"}, {"uuid": "dfb82a97-1f19-4414-9645-2e4654523291", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://bsky.app/profile/uutis.bsky.social/post/3mv7uyjll5o25", "content": "Check Pointin VPN-teknologiassa on kaksi kriittist\u00e4 haavoittuvuutta (CVE-2026-85102 ja CVE-2026-85103), jotka voivat sallia todentamattoman et\u00e4hy\u00f6kk\u00e4\u00e4j\u00e4n suorittaa mielivaltaista koodia. Puutteet koskevat sek\u00e4 Remote Access- ett\u00e4 Site-to-Site VPN -toimintoja.\n\n#kyberturvallisuus", "creation_timestamp": "2026-09-11T05:55:58.920515Z"}, {"uuid": "02076cf9-6c46-445c-a8a0-87b5ca08a8e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85103", "type": "seen", "source": "https://bsky.app/profile/bloggersminds.com/post/3mvaguyojqa2t", "content": "Check Point Issues Critical VPN Patch for CVE-2026-85102 and CVE-2026-85103\n\nWhat the Vulnerabilities Entail Two high\u2011severity weaknesses have been identified in Check Point's Remote Acce\n\nhttps://bloggersminds.com/post/check-point-issues-critical-vpn-patch-for-cve-2026-85102-and-cve-2026-85103-5467", "creation_timestamp": "2026-09-11T11:16:07.944054Z"}, {"uuid": "24416927-1182-477c-bbbf-13e92703bca3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mvah6zeona22", "content": "Check Point had to patch CVE-2026-85102 and CVE-2026-85103 because remote code execution on VPNs is apparently back in fashion. Same story different day.\n\n#patchtuesday #whyboilthetea", "creation_timestamp": "2026-09-11T11:21:43.320739Z"}, {"uuid": "2fa0cd28-e18c-41a1-a8fe-bc1f714cfe6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mvah73nxbf2k", "content": "Just another Tuesday in IT, as Check Point VPN users find themselves blessed with CVE-2026-85102 and CVE-2026-85103 allowing remote code execution. Naturally, anyone relying on these gateways gets the privilege of dropping everything because attackers could casually run whatever ...\n\nRead full story", "creation_timestamp": "2026-09-11T11:21:46.181902Z"}, {"uuid": "2e9f78ee-a750-4a73-9629-216d9980e9a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mvahfmkw6u2s", "content": "Check Point released patches for two unauthenticated VPN-related RCE vulnerabilities (CVE-2026-85102, CVE-2026-85103) with mitigations via manual VPN rules.\n", "creation_timestamp": "2026-09-11T11:25:25.808703Z"}, {"uuid": "b0422cae-44bb-42dc-abdb-6a3ed00f236d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mvahhczcr323", "content": "Check Point released patches for two unauthenticated VPN-related RCE vulnerabilities (CVE-2026-85102, CVE-2026-85103) with mitigations via manual VPN rules.\n", "creation_timestamp": "2026-09-11T11:26:22.475032Z"}, {"uuid": "665c9266-cf5f-4e2b-8a3c-b32e9a283b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://www.securityweek.com/check-point-patches-critical-vpn-vulnerabilities/", "content": "Tracked as CVE-2026-85102 and CVE-2026-85103, the flaws could be exploited for remote code execution.\n\nThe post Check Point Patches Critical VPN Vulnerabilities appeared first on SecurityWeek.", "creation_timestamp": "2026-09-11T13:00:41.926852Z"}, {"uuid": "d65e0d37-4e20-4d1d-b6d0-57937abb1f05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/117252751230026579", "content": "Tracked as CVE-2026-85102 and CVE-2026-85103, the flaws could be exploited for remote code execution. https://www.securityweek.com/check-point-patches-critical-vpn-vulnerabilities/", "creation_timestamp": "2026-09-11T13:56:38.562183Z"}, {"uuid": "8771d565-9754-4374-a250-cb0ae093f065", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mvapub6m7c23", "content": "Tracked as CVE-2026-85102 and CVE-2026-85103, the flaws could be exploited for remote code execution. www.securityweek.com/check-point-...", "creation_timestamp": "2026-09-11T13:56:47.016689Z"}, {"uuid": "87e47473-3358-40b6-96ea-8c026c9b0211", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://t.me/information_security_channel/55899", "content": "Check Point Patches Critical VPN Vulnerabilities\nhttps://www.securityweek.com/check-point-patches-critical-vpn-vulnerabilities/\n\nTracked as CVE-2026-85102 and CVE-2026-85103, the flaws could be exploited for remote code execution.\nThe post Check Point Patches Critical VPN Vulnerabilities (https://www.securityweek.com/check-point-patches-critical-vpn-vulnerabilities/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-11T17:00:04.218583Z"}, {"uuid": "65e5e1ba-26b9-401c-95fa-8d102742ae9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://t.me/information_security_channel/55899", "content": "Check Point Patches Critical VPN Vulnerabilities\nhttps://www.securityweek.com/check-point-patches-critical-vpn-vulnerabilities/\n\nTracked as CVE-2026-85102 and CVE-2026-85103, the flaws could be exploited for remote code execution.\nThe post Check Point Patches Critical VPN Vulnerabilities (https://www.securityweek.com/check-point-patches-critical-vpn-vulnerabilities/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-12T00:00:36.581572Z"}, {"uuid": "1f9f8a6b-f8bc-4db4-af24-9e4c650c17bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://t.me/CyberDispatch/2891", "content": "Check Point patched two critical VPN certificate flaws, CVE-2026-85102 and CVE-2026-85103, that could allow unauthenticated RCE under specific, undisclosed conditions.\n\nBoth carry CVSS 9.8 scores.", "creation_timestamp": "2026-09-12T00:00:56.747117Z"}, {"uuid": "ad1be02b-61a0-4f09-ae24-b5ca2e0165da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://www.securityweek.com/check-point-patches-critical-vpn-vulnerabilities/", "content": "Tracked as CVE-2026-85102 and CVE-2026-85103, the flaws could be exploited for remote code execution.\n\nThe post Check Point Patches Critical VPN Vulnerabilities appeared first on SecurityWeek.", "creation_timestamp": "2026-09-12T01:00:39.175417Z"}, {"uuid": "ef385e03-f1bc-4bc3-a362-2ac52522f844", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mvdbec4o4a2f", "content": "The Dutch Nationaal Cyber Security Centrum (NCSC) is warning of imminent exploitation of two critical flaws in Check Point VPN tracked as CVE-2026-85102 and CVE-2026-85103.", "creation_timestamp": "2026-09-12T14:15:17.708196Z"}, {"uuid": "0c884019-0572-4cfe-82d4-9a2ea8008bad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117258498975879776", "content": "https://www.ncsc.nl/alerts/kritieke-kwetsbaarheden-in-check-point-vpn-producten-met-actief-misbruik-verwacht-update-nu\n\nEr zijn 2 kritieke kwetsbaarheden in Check Point VPN-producten, met de kenmerken CVE-2026-85102 en CVE-2026-85103. Het gaat om 2 ernstige kwetsbaarheden met een CVSS-score van 9,8. Het NCSC beoordeelt de kans op misbruik en de mogelijke schade als hoog en verwacht dat er snel pogingen tot misbruik zullen plaatsvinden, het advies is dan ook om de updates zo snel mogelijk te installeren.\nTranslated by LibreWolf:\n\nThere are 2 critical vulnerabilities in Check Point VPN products, with the characteristics CVE-2026-85102 and CVE-2026-85103. This concerns 2 serious vulnerabilities with a CVSS score of 9.8. The NCSC assesses the risk of abuse and possible damage as high and expects that attempts at abuse will take place quickly, so the advice is to install the updates as quickly as possible.", "creation_timestamp": "2026-09-12T14:18:22.681611Z"}, {"uuid": "868d2164-0a7b-4afb-abef-f46ff15b5eed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mvdfcwyiis2g", "content": "Check Point VPN\u306b2\u3064\u306e\u8106\u5f31\u6027\uff08CVE-2026-85102, CVE-2026-85103\uff09\u304c\u3042\u308a\u3001\u60aa\u7528\u304c\u5dee\u3057\u8feb\u3063\u3066\u3044\u308b\u3068\u30aa\u30e9\u30f3\u30c0NCSC\u304c\u8b66\u544a\u3002", "creation_timestamp": "2026-09-12T15:26:07.829888Z"}, {"uuid": "6eace36d-26b5-4466-9126-cc10628e960e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvdfwpyp542t", "content": "\ud83e\udd16 Dutch NCSC warns of imminent exploitation of two critical Check Point VPN flaws: CVE-2026-85102 and CVE-2026-85103, both RCE with no public PoC yet. Patches shipped Sep 9, patch\u2026", "creation_timestamp": "2026-09-12T15:37:11.612641Z"}, {"uuid": "64cc7fc5-696d-41a5-88cd-9a68bcbf9d57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mvdgfhmbta24", "content": "Dutch NCSC says exploitation of two critical Check Point VPN flaws is imminent. CVE-2026-85102 may enable code execution, while CVE-2026-85103 is a heap overflow risking full system control. #CheckPoint #NCSC #Netherlands", "creation_timestamp": "2026-09-12T15:45:26.819364Z"}, {"uuid": "e5af559b-d14c-4102-a1be-b4e08393337c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://www.bleepingcomputer.com/news/security/dutch-ncsc-critical-check-point-vpn-flaws-exploitation-is-imminent/", "content": "The Dutch Nationaal Cyber Security Centrum (NCSC) is warning of imminent exploitation of two critical flaws in Check Point VPN tracked as CVE-2026-85102 and CVE-2026-85103. [...]", "creation_timestamp": "2026-09-12T16:00:45.085198Z"}, {"uuid": "aa33c708-abeb-4cc1-a866-21288f3f555a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://www.bleepingcomputer.com/news/security/dutch-ncsc-critical-check-point-vpn-flaws-exploitation-is-imminent/", "content": "The Dutch Nationaal Cyber Security Centrum (NCSC) is warning of imminent exploitation of two critical flaws in Check Point VPN tracked as CVE-2026-85102 and CVE-2026-85103. [...]", "creation_timestamp": "2026-09-13T01:00:33.290344Z"}, {"uuid": "5170bacd-813e-4193-8b78-8f34316dc7aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mves7dnhyy2t", "content": "\ud83e\udd16 Dutch NCSC warns exploitation is imminent for two critical Check Point VPN flaws, CVE-2026-85102 and CVE-2026-85103. Patch internet-exposed VPN gateways now.\n\nhttps://www.bleepingcomputer.com/news/security/dutch-ncsc-critical-check-point-vpn-flaws-exploitation-is-imminent/", "creation_timestamp": "2026-09-13T04:49:24.321100Z"}, {"uuid": "d4d610be-d189-478f-835a-e784bf7e890a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mveym7orcd2l", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85046: 29 interactions\nCVE-2026-85880: 22 interactions\nCVE-2026-20079: 19 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-85102: 10 interactions\nCVE-2026-85103: 10 interactions\nCVE-2026-81578: 9 interactions\n", "creation_timestamp": "2026-09-13T06:43:58.945523Z"}, {"uuid": "ad6b08a7-60db-4134-aea8-6c2a9b481937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85103", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mvfns47g7x2n", "content": "Check Point patches two critical VPN gateway flaws scoring 9.8 on\u00a0CVSS\n\nCheck Point patches two critical VPN vulnerabilities, CVE-2026-85102 and CVE-2026-85103, rated CVSS 9.8 and capable of unauthenticated remote code\u2026\n\nhttps://thecybersecguru.com/news/check-point-vpn-cve-2026-85102-cve-2026-85103/", "creation_timestamp": "2026-09-13T13:03:05.751998Z"}, {"uuid": "666b9fb7-f153-4ee2-992d-d668ed07605e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mvfyzr453m23", "content": "Check Point patches two critical 9.8 CVSS vulnerabilities (CVE-2026-85102, CVE-2026-85103) in its VPN products. Flaws could allow unauthenticated RCE. Admins are urged to apply hotfixes immediately. #CyberSecurity #Vulnerability #VPN #PatchNow\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-13T16:24:13.877088Z"}, {"uuid": "de14d69a-f939-426f-b012-0bac59579b20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117264654596701460", "content": "\ud83d\udcf0 Check Point patches two critical 9.8 CVSS flaws in VPN products\nCheck Point patches two critical 9.8 CVSS vulnerabilities (CVE-2026-85102, CVE-2026-85103) in its VPN products. Flaws could allow unauthenticated RCE. Admins are urged to apply hotfixes immediately. #CyberSecurity #Vulnerability #VPN #PatchNow\n\ud83d\udd17 https://cyber.netsecops.io/articles/check-point-patches-critical-cvss-9-8-vpn-flaws/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-09-13T16:24:12.027217Z"}, {"uuid": "81752520-d552-42a4-a042-5239ae1bbe43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://t.me/CyberSecurityIL/9473", "content": "\u05de\u05e2\u05e8\u05da \u05d4\u05e1\u05d9\u05d9\u05d1\u05e8 \u05d4\u05d4\u05d5\u05dc\u05e0\u05d3\u05d9 \u05de\u05ea\u05e8\u05d9\u05e2 \u05de\u05e4\u05e0\u05d9 \u05e9\u05ea\u05d9 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d1-Check Point VPN \ud83d\ude00\n\n\u05dc\u05e4\u05d9 \u05d4\u05d4\u05d5\u05d3\u05e2\u05d4 \u05e9\u05dc \u05de\u05e2\u05e8\u05da \u05d4\u05e1\u05d9\u05d9\u05d1\u05e8 \u05d4\u05d4\u05d5\u05dc\u05e0\u05d3\u05d9, \u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea CVE-2026-85102 \u05d5-CVE-2026-85103 \u05de\u05d0\u05e4\u05e9\u05e8\u05d5\u05ea \u05d4\u05e8\u05e6\u05ea \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7, \u05d5\u05dc\u05de\u05e8\u05d5\u05ea \u05e9\u05d0\u05d9\u05df \u05d1\u05d9\u05e0\u05ea\u05d9\u05d9\u05dd POC \u05d0\u05d5 \u05e2\u05d3\u05d5\u05ea \u05dc\u05e0\u05d9\u05e6\u05d5\u05dc \u05e2\"\u05d9 \u05ea\u05d5\u05e7\u05e4\u05d9\u05dd, \u05d4\u05dd \u05de\u05d6\u05d4\u05d9\u05e8\u05d9\u05dd \u05db\u05d9 \u05e0\u05d9\u05e6\u05d5\u05dc \u05db\u05d6\u05d4 \u05d1\u05d5\u05d5\u05d3\u05d0\u05d9 \u05d9\u05ea\u05e8\u05d7\u05e9 \u05d1\u05e7\u05e8\u05d5\u05d1.\n\n\u05dc\u05e4\u05e0\u05d9 \u05d0\u05e8\u05d1\u05e2\u05d4 \u05d9\u05de\u05d9\u05dd \u05e6'\u05e7\u05e4\u05d5\u05d9\u05e0\u05d8 \u05e9\u05d7\u05e8\u05e8\u05d4 \u05e2\u05d3\u05db\u05d5\u05df \u05dc\u05e1\u05d2\u05d9\u05e8\u05ea \u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d5\u05de\u05d5\u05de\u05dc\u05e5 \u05dc\u05e2\u05d3\u05db\u05df.\n\n\u05e4\u05e8\u05d8\u05d9\u05dd \u05e0\u05d5\u05e1\u05e4\u05d9\u05dd \u05d1-BleepingComputer\n\nhttps://t.me/CyberSecurityIL/9473", "creation_timestamp": "2026-09-13T21:00:05.048626Z"}]}