Improper Certificate Validation in Quantum Security Gateway
CVSS Skor
9.8
EPSS İhtimal
%7.5
Risk Skoru
1.5
Yayın
1 ay önce
Etkilenen ürün ve sürüm için yayımlanan güvenlik güncellemesini uygulayın.
Envanterimdeki Etkisi
Yalnızca hesabınıza eklediğiniz kişisel ürünler değerlendirilir; kurumsal envanter burada görünmez.
Oturum kontrol ediliyor…
Zafiyet Açıklaması
DayBreach CVE AI Araştırması
CVE-2026-85102 için toplanan üretici, dağıtım, yama ve güvenlik kaynağı kayıtlarını karşılaştırıp kanıt bağlantılı bir açıklama hazırlayalım.
Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.
IMPACT — Etkilenen Ürünler ve Yazılımlar
Affected Products
The following products are affected by CVE-2026-85102 vulnerability. Even if our threat engine is aware of the exact versions of the products that are affected, the information is represented below.
| ID | VENDOR | PRODUCT | ACTION |
|---|---|---|---|
| 1 | checkpoint | quantum security gateway | İncele |
| 2 | checkpoint | gaia embedded | İncele |
| 3 | checkpoint | gaia embedded | İncele |
| 4 | checkpoint | gaia embedded | İncele |
| 5 | checkpoint | gaia embedded | İncele |
| 6 | checkpoint | quantum spark 1530 | İncele |
| 7 | checkpoint | quantum spark 1535 | İncele |
| 8 | checkpoint | quantum spark 1550 | İncele |
| 9 | checkpoint | quantum spark 1555 | İncele |
| 10 | checkpoint | quantum spark 1570 | İncele |
| 11 | checkpoint | quantum spark 1570r | İncele |
| 12 | checkpoint | quantum spark 1575 | İncele |
| 13 | checkpoint | quantum spark 1575r | İncele |
| 14 | checkpoint | quantum spark 1590 | İncele |
| 15 | checkpoint | quantum spark 1595 | İncele |
| 16 | checkpoint | quantum spark 1595r | İncele |
| 17 | checkpoint | quantum spark 1600 | İncele |
| 18 | checkpoint | quantum spark 1800 | İncele |
| 19 | checkpoint | quantum spark 1900 | İncele |
| 20 | checkpoint | quantum spark 2000 | İncele |
| 21 | checkpoint | quantum spark 2530 | İncele |
| 22 | checkpoint | quantum spark 2550 | İncele |
| 23 | checkpoint | quantum spark 2560 | İncele |
| 24 | checkpoint | quantum spark 2570 | İncele |
| 25 | checkpoint | quantum spark 2580 | İncele |
| 26 | checkpoint | quantum spark 2590 | İncele |
| 27 | checkpoint | gaia os | İncele |
| 28 | checkpoint | gaia os | İncele |
| 29 | checkpoint | gaia os | İncele |
| 30 | checkpoint | gaia os | İncele |
| 31 | checkpoint | gaia os | İncele |
| 32 | checkpoint | quantum 3600 | İncele |
| 33 | checkpoint | quantum 3800 | İncele |
| 34 | checkpoint | quantum force 19100 | İncele |
| 35 | checkpoint | quantum force 19200 | İncele |
| 36 | checkpoint | quantum force 29100 | İncele |
| 37 | checkpoint | quantum force 29200 | İncele |
| 38 | checkpoint | quantum force 3920 | İncele |
| 39 | checkpoint | quantum force 3950 | İncele |
| 40 | checkpoint | quantum force 3970 | İncele |
| 41 | checkpoint | quantum force 3980 | İncele |
| 42 | checkpoint | quantum force 9100 | İncele |
| 43 | checkpoint | quantum force 9200 | İncele |
| 44 | checkpoint | quantum force 9300 | İncele |
| 45 | checkpoint | quantum force 9400 | İncele |
| 46 | checkpoint | quantum force 9700 | İncele |
| 47 | checkpoint | quantum force 9800 | İncele |
| 48 | checkpoint | quantum lightspeed mls200 | İncele |
| 49 | checkpoint | quantum lightspeed mls400 | İncele |
| 50 | checkpoint | quantum lightspeed qls250 | İncele |
| 51 | checkpoint | quantum lightspeed qls450 | İncele |
| 52 | checkpoint | quantum lightspeed qls650 | İncele |
| 53 | checkpoint | quantum lightspeed qls800 | İncele |
| 54 | Check Point | Multiple Products | İncele |
RED HAT CSAF/VEX — Ürün Etki Kontrolü
SCORING — CVSS Çoklu Kaynak Skoru
CVSS Scores
The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from various sources for each CVE.
| SCORE | VERSION | SEVERITY | VECTOR | SOURCE |
|---|---|---|---|---|
| 9.8 | CVSS V31 | CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | NVD |
| 9.8 | CVSS V3_1 | CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | CVE CNA |
Yama ve İyileştirme Rehberi (Solution)
Solution & Remediation Advisory
1 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Public exploit ve aktif sömürü durumu
Doğrulanmış exploit istihbaratı
Bu CVE CISA KEV kataloğunda aktif sömürülen olarak işaretli; ancak henüz doğrulanmış, indirilebilir bir public PoC veya Metasploit modülü bulunamadı. Aktif sömürü kanıtı public exploit kodu bulunduğu anlamına gelmez.
Zafiyet Dağılımı ve Saldırı Kalıpları (CWE & CAPEC)
CWE - Common Weakness Enumeration
While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2026-85102 is associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-85102 weaknesses.
Saldırı Vektörü ve Erişilebilirlik Karakteristiği
Resmi Kaynaklar ve Danışma Bültenleri
CVSS Vektör Radar Grafiği
9.8 / 10Vulnerability Scoring Details
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HYama doğrulandı
Zafiyet Türü (CWE & CAPEC)
İlgili Benzer Açıklar
Information disclosure
User Authentication Bypass in VPN Remote Access and Mobile Access
Authentication Bypass in the SmartConsole Login Process Using an Application Token
Directory Traversal and File upload allows execution of arbitrary script on the Management Server
NULL pointer deref in signature_algorithms processing
Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-85102"