Free practical cybersecurity guidance for organisations without a security team.
hello@actionsoncyber.com
Actions On Cyber logo
Contact
← Back to Vulnerability Briefs

Critical Security Flaw Found in Check Point VPN Systems

A serious security weakness has been found in Check Point VPN products that could allow hackers to take control of affected systems remotely. This matters because many small organisations use VPNs to protect their online connections, and this flaw could let attackers bypass those protections.

13 September 2026

Reference: CVE-2026-85103

1. What is being reported?

Researchers have discovered a critical flaw in the way Check Point's VPN products handle certain certificate data. This flaw could let an attacker who is not logged in run harmful code on the VPN system, potentially taking over the device or network.

2. What this means in plain English

If your organisation uses Check Point VPN products, this vulnerability could allow criminals to break into your network remotely without needing a password. This could lead to theft of sensitive information, disruption of services, or further attacks.

3. Could this affect a small business?

Small organisations using Check Point Quantum Security Management or Quantum Security Gateway VPN systems could be at risk. Those not using these specific Check Point VPN products are unlikely to be affected.

4. What to do now

  • Check if your organisation uses Check Point Quantum Security Management or Quantum Security Gateway VPN products.
  • Contact your IT provider or software supplier to confirm if your systems are affected by this vulnerability.
  • Apply any security patches or updates provided by Check Point as soon as possible.
  • Monitor your VPN systems for any unusual activity and review access logs regularly.

5. Ask your IT provider

Can you confirm whether our Check Point VPN systems are affected by CVE-2026-85103, and have the necessary security updates been applied?

6. Bottom line

If you use Check Point VPN products, act quickly to update and protect your network from this critical vulnerability.

Information based on CISA KEV, NVD, and reputable security news reports.

Back to Vulnerability Briefs