{"vulnerability": "CVE-2026-85103", "sightings": [{"uuid": "9a5d63e3-0db7-475a-9da0-b488457b4a83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0365", "content": "", "creation_timestamp": "2026-09-10T12:15:05.636790Z"}, {"uuid": "5029cffd-645e-4c2a-8144-55d9aee7f22b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85103", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117241323457387871", "content": "CRITICAL CVE-2026-85103 in Check Point Quantum Security Gateway: Heap-based buffer overflow in VPN certificate ASN.1 decoding allows unauthenticated RCE. Patch pending \u2014 monitor vendor. https://radar.offseq.com/threat/cve-2026-85103-cwe-122-heap-based-buffer-overflow-in-checkpoint-quantum-security-gateway-769c0bcac8d0fa47 #OffSeq #CheckPoint #infosec #Vuln", "creation_timestamp": "2026-09-09T13:30:24.810618Z"}, {"uuid": "faa0dff4-9b78-4568-90ea-69b3a64ceb23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85103", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mv3nhdl63x25", "content": "Check Point Quantum Security Gateway hit by CRITICAL heap overflow (CVE-2026-85103): unauthenticated RCE possible. No patch yet \u2014 watch vendor advisories. https://radar.offseq.com/threat/cve-2026-85103-cwe-122-heap-based-buffer-overflow-in-checkpoint-quantum-security-gateway-769c0bcac8d0fa47 #Off...", "creation_timestamp": "2026-09-09T13:30:28.611444Z"}, {"uuid": "b9b5e329-be28-45e3-933e-9188afbfa291", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv3pka2oli2r", "content": "\ud83d\udea8 CVE-2026-85103 \u2014 CVSS 9.8 CRITICAL\n\nA heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85103\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-09T14:07:50.751049Z"}, {"uuid": "2e4de0ca-ff3d-4960-9085-1498a018ad59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85103", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117241880862091037", "content": "It has been :zero_percent: days since an ASN.1 decoding vuln.\nIt has been :zero_percent: days since an overflow vuln in a corp VPN.\nIt has been :zero_percent: days since a vuln with \"Quantum\" in the system name.\nThey are all the same vuln.\nhttps://nvd.nist.gov/vuln/detail/cve-2026-85103\n\nA heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.", "creation_timestamp": "2026-09-09T15:52:10.377143Z"}, {"uuid": "d6e38ba8-5f9c-40cc-af0d-7306f569f03c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/check-point-security-advisory-av26-902", "content": "", "creation_timestamp": "2026-09-09T20:15:07.153055Z"}, {"uuid": "f8b2f9c8-dc44-40fb-b287-00216ab16255", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv53st2kb22b", "content": "CVE-2026-85103 - quantum security gateway\nThe certificate handling in Check Point Quantum Security Management and Gateway can be tricked into writing past the intended memory area. This could let an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#checkpoint #CVE #infosec", "creation_timestamp": "2026-09-10T03:20:03.903987Z"}, {"uuid": "9ee4d13c-4fbd-4ce6-85f2-14b24456828f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/140d43d1-bdc2-4018-832d-734f90b8eb15", "content": "", "creation_timestamp": "2026-09-10T07:40:54.728549Z"}, {"uuid": "b6a609bb-a31d-454f-8659-baf210aab5c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117245882514956478", "content": "A lot of offensive activities were identified targeting Check Point Quantum Security Gateway and Quantum Security Management (CVE-2026-85103) https://vuldb.com/vuln/401701/cti", "creation_timestamp": "2026-09-10T08:49:50.216182Z"}, {"uuid": "d4d8cb9e-4a63-4ba3-9d6c-863c47a14eab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://www.ncsc.nl/alerts/kritieke-kwetsbaarheden-in-check-point-vpn-producten-met-actief-misbruik-verwacht-update-nu", "content": "", "creation_timestamp": "2026-09-10T12:15:09.969756Z"}, {"uuid": "63b1cffc-e7f7-4b14-b918-aa2d2fcee475", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mv62pcqdno2i", "content": "~Certeu~\nUnauthenticated remote code execution affects Check Point VPN appliances; apply hotfixes immediately.\n-\nIOCs: CVE-2026-85102, CVE-2026-85103\n-\n#CVE202685102 #CVE202685103 #ThreatIntel", "creation_timestamp": "2026-09-10T12:32:52.136711Z"}, {"uuid": "9ee7698a-b9d1-49de-93b2-9ad700d01b64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://t.me/thehackernews/10024", "content": "\u203c\ufe0f Check Point patched two critical VPN certificate flaws, CVE-2026-85102 and CVE-2026-85103, that could allow unauthenticated RCE under specific, undisclosed conditions.\n\nBoth carry CVSS 9.8 scores.\n\nWhat\u2019s affected and how to fix it: https://thehackernews.com/2026/09/check-point-discloses-two-98-rated-vpn.html", "creation_timestamp": "2026-09-10T14:00:04.794751Z"}, {"uuid": "48ec9cab-3bdc-485f-8354-7f6323132237", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mv6bajxkxg2f", "content": "CVE-2026-85103 is trending. Hype score 18, currently #2 on cvemon.\n\nA heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-85103", "creation_timestamp": "2026-09-10T14:29:52.328893Z"}, {"uuid": "c0bf7855-e2b5-4002-88dd-2a4f734fd62b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mv6gtzdqe72t", "content": "\ud83d\udd17 CVE : CVE-2026-85102, CVE-2026-85103", "creation_timestamp": "2026-09-10T16:10:14.611192Z"}]}