Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Improper Certificate Validation in Quantum Security Gateway

CVSS 3.1 9.8 CRITICALCheck source for fixed versionsCISA KEV

cve-program · CVE-2026-85102

Published

Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-85102

Published

Quantum Security Gateway

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "product": "Quantum Security Gateway",
                    "vendor": "checkpoint",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "R82.10 with Jumbo Hotfix Take 43 or below"
                        },
                        {
                            "status": "affected",
                            "version": "R82 with Jumbo Hotfix Take 125 or below"
                        },
                        {
                            "status": "affected",
                            "version": "R81.20 with Jumbo Hotfix Take 165 or below"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 12 Nov 19:39 UTC · 274 of 275 readable · 272 fully read · documentation 464/469 current