13 September 2026
Reference: CVE-2026-85102
1. What is being reported?
The report describes a critical vulnerability in Check Point Quantum Security Gateway VPNs where the device does not properly check security certificates during connection setup. This flaw could allow an attacker who is not authorised to run harmful software on the VPN device itself.
2. What this means in plain English
If your organisation uses a Check Point VPN, this flaw could let attackers break into your network by exploiting the VPN device. This could lead to loss of control over your network security and potentially expose sensitive information.
3. Could this affect a small business?
Small businesses using Check Point Quantum Security Gateway VPNs are at risk. Organisations not using this specific VPN device or using other VPN solutions are unlikely to be affected.
4. What to do now
- Check if your organisation uses Check Point Quantum Security Gateway VPN devices.
- Contact your IT provider or Check Point support to confirm if your device is affected.
- Apply any security updates or patches provided by Check Point immediately.
- Monitor your VPN devices for unusual activity and review access logs.
5. Ask your IT provider
Can you confirm if our Check Point Quantum Security Gateway VPN devices are affected by CVE-2026-85102, and have the necessary security patches been applied?
6. Bottom line
If you use Check Point VPN devices, act quickly to update them and protect your network from this critical vulnerability.
Information based on CISA KEV, NVD, and reputable security news reports.