← לוח פגיעויות

CVE-2026-85102

קריטית 9.8 מנוצלת בשטח (KEV)

ניצול פעיל מאומת — קטלוג CISA KEV

שם
Check Point Multiple Products Improper Certificate Validation Vulnerability
נוסף לקטלוג
יעד טיפול (פדרלי)
פעולה נדרשת
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

תיאור (מקור, אנגלית)

Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.

מדדים

CVSS 3.1
9.8 (CRITICAL) מקור הציון: CNA CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS — סבירות ניצול
8% (אחוזון 100) נכון ל-5/10/2026
CWE
CWE-295

מוצרים מושפעים

checkpoint: gaia embedded; checkpoint: quantum spark 1530; checkpoint: quantum spark 1535; checkpoint: quantum spark 1550; checkpoint: quantum spark 1555; checkpoint: quantum spark 1570; checkpoint: quantum spark 1570r; checkpoint: quantum spark 1575; checkpoint: quantum spark 1575r; checkpoint: quantum spark 1590; checkpoint: quantum spark 1595; checkpoint: quantum spark 1595r; checkpoint: quantum spark 1600; checkpoint: quantum spark 1800; checkpoint: quantum spark 1900

קישורים