https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 11 Sep 2026 10:59:55 +0000 https://vulnerability.circl.lu/sighting/dfb82a97-1f19-4414-9645-2e4654523291/export {"uuid": "dfb82a97-1f19-4414-9645-2e4654523291", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://bsky.app/profile/uutis.bsky.social/post/3mv7uyjll5o25", "content": "Check Pointin VPN-teknologiassa on kaksi kriittist\u00e4 haavoittuvuutta (CVE-2026-85102 ja CVE-2026-85103), jotka voivat sallia todentamattoman et\u00e4hy\u00f6kk\u00e4\u00e4j\u00e4n suorittaa mielivaltaista koodia. Puutteet koskevat sek\u00e4 Remote Access- ett\u00e4 Site-to-Site VPN -toimintoja.\n\n#kyberturvallisuus", "creation_timestamp": "2026-09-11T05:55:58.920515Z"} {"uuid": "dfb82a97-1f19-4414-9645-2e4654523291", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://bsky.app/profile/uutis.bsky.social/post/3mv7uyjll5o25", "content": "Check Pointin VPN-teknologiassa on kaksi kriittist\u00e4 haavoittuvuutta (CVE-2026-85102 ja CVE-2026-85103), jotka voivat sallia todentamattoman et\u00e4hy\u00f6kk\u00e4\u00e4j\u00e4n suorittaa mielivaltaista koodia. Puutteet koskevat sek\u00e4 Remote Access- ett\u00e4 Site-to-Site VPN -toimintoja.\n\n#kyberturvallisuus", "creation_timestamp": "2026-09-11T05:55:58.920515Z"} https://vulnerability.circl.lu/sighting/dfb82a97-1f19-4414-9645-2e4654523291/export Fri, 11 Sep 2026 05:55:58 +0000 https://vulnerability.circl.lu/sighting/c04b899e-e5ee-452c-9491-b426c3f7b182/export {"uuid": "c04b899e-e5ee-452c-9491-b426c3f7b182", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mv7noz24i724", "content": "Check Point patched two critical VPN certificate flaws, CVE-2026-85102 and CVE-2026-85103, that could enable unauthenticated RCE on Security Gateway and Management systems under specific conditions. #CheckPoint #VPNFlaws #RCE", "creation_timestamp": "2026-09-11T03:45:23.365310Z"} {"uuid": "c04b899e-e5ee-452c-9491-b426c3f7b182", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mv7noz24i724", "content": "Check Point patched two critical VPN certificate flaws, CVE-2026-85102 and CVE-2026-85103, that could enable unauthenticated RCE on Security Gateway and Management systems under specific conditions. #CheckPoint #VPNFlaws #RCE", "creation_timestamp": "2026-09-11T03:45:23.365310Z"} https://vulnerability.circl.lu/sighting/c04b899e-e5ee-452c-9491-b426c3f7b182/export Fri, 11 Sep 2026 03:45:23 +0000 https://vulnerability.circl.lu/sighting/61791e5e-8a7f-44db-8941-09dcfceba7ec/export {"uuid": "61791e5e-8a7f-44db-8941-09dcfceba7ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0365", "content": "Check Point heeft 2 kritieke kwetsbaarheden verholpen. De kwetsbaarheid met kenmerk CVE-2026-85102 heeft een CVSS-score van 9,8. De kwetsbaarheid bevindt zich in het VPN-onderhandelingsproces van de Quantum Security Gateway en wordt veroorzaakt door onjuiste validatie van certificaatvertrouwen. Hierdoor kan een niet-geauthenticeerde externe aanvaller authenticatiecontroles omzeilen en willekeurige code uitvoeren op de Security Gateway. Exploitatie vindt plaats tijdens de VPN-onderhandeling, waarbij certificaatgegevens onvoldoende worden gevalideerd. De kwetsbaarheid geldt voor Security Gateway en Check Point Spark Firewall wanneer Site-to-Site VPN of Remote Access VPN wordt gebruikt. \nVoor Site-to-Site VPN adviseert Check Point om implied rules for VPN uit te schakelen en VPN-toegang voor UDP/500 en UDP/4500 alleen expliciet toe te staan voor de specifieke peer-IP-adressen. Deze mitigatie is niet van toepassing op lokaal beheerde Spark Firewalls.\n\nDe kwetsbaarheid met kenmerk CVE-2026-85103 heeft een CVSS-score van 9,8. Het betreft een heap-based buffer overflow in de ASN.1-decoding van VPN-certificaten, veroorzaakt door onjuiste verwerking van ASN.1-datastructuren tijdens de certificaatverwerking. Een niet-geauthenticeerde externe aanvaller kan deze kwetsbaarheid misbruiken om willekeurige code uit te voeren op het getroffen systeem. De kwetsbaarheid bevindt zich in een component die onderdeel is van de VPN-infrastructuur en kan bij succesvolle exploitatie de vertrouwelijkheid, integriteit en beschikbaarheid van het getroffen systeem be\u00efnvloeden.\n\nHet NCSC verwacht dat op korte termijn pogingen tot grootschalig misbruik zullen plaatsvinden en roept organisaties op de advisory van Check Point met spoed op te volgen.", "creation_timestamp": "2026-09-11T01:00:35.415397Z"} {"uuid": "61791e5e-8a7f-44db-8941-09dcfceba7ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0365", "content": "Check Point heeft 2 kritieke kwetsbaarheden verholpen. De kwetsbaarheid met kenmerk CVE-2026-85102 heeft een CVSS-score van 9,8. De kwetsbaarheid bevindt zich in het VPN-onderhandelingsproces van de Quantum Security Gateway en wordt veroorzaakt door onjuiste validatie van certificaatvertrouwen. Hierdoor kan een niet-geauthenticeerde externe aanvaller authenticatiecontroles omzeilen en willekeurige code uitvoeren op de Security Gateway. Exploitatie vindt plaats tijdens de VPN-onderhandeling, waarbij certificaatgegevens onvoldoende worden gevalideerd. De kwetsbaarheid geldt voor Security Gateway en Check Point Spark Firewall wanneer Site-to-Site VPN of Remote Access VPN wordt gebruikt. \nVoor Site-to-Site VPN adviseert Check Point om implied rules for VPN uit te schakelen en VPN-toegang voor UDP/500 en UDP/4500 alleen expliciet toe te staan voor de specifieke peer-IP-adressen. Deze mitigatie is niet van toepassing op lokaal beheerde Spark Firewalls.\n\nDe kwetsbaarheid met kenmerk CVE-2026-85103 heeft een CVSS-score van 9,8. Het betreft een heap-based buffer overflow in de ASN.1-decoding van VPN-certificaten, veroorzaakt door onjuiste verwerking van ASN.1-datastructuren tijdens de certificaatverwerking. Een niet-geauthenticeerde externe aanvaller kan deze kwetsbaarheid misbruiken om willekeurige code uit te voeren op het getroffen systeem. De kwetsbaarheid bevindt zich in een component die onderdeel is van de VPN-infrastructuur en kan bij succesvolle exploitatie de vertrouwelijkheid, integriteit en beschikbaarheid van het getroffen systeem be\u00efnvloeden.\n\nHet NCSC verwacht dat op korte termijn pogingen tot grootschalig misbruik zullen plaatsvinden en roept organisaties op de advisory van Check Point met spoed op te volgen.", "creation_timestamp": "2026-09-11T01:00:35.415397Z"} https://vulnerability.circl.lu/sighting/61791e5e-8a7f-44db-8941-09dcfceba7ec/export Fri, 11 Sep 2026 01:00:35 +0000 https://vulnerability.circl.lu/sighting/1d30ab38-64fa-4cf0-ad1c-a246dbf28242/export {"uuid": "1d30ab38-64fa-4cf0-ad1c-a246dbf28242", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://t.me/CyberDispatch/2891", "content": "Check Point patched two critical VPN certificate flaws, CVE-2026-85102 and CVE-2026-85103, that could allow unauthenticated RCE under specific, undisclosed conditions.\n\nBoth carry CVSS 9.8 scores.", "creation_timestamp": "2026-09-11T01:00:03.587145Z"} {"uuid": "1d30ab38-64fa-4cf0-ad1c-a246dbf28242", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://t.me/CyberDispatch/2891", "content": "Check Point patched two critical VPN certificate flaws, CVE-2026-85102 and CVE-2026-85103, that could allow unauthenticated RCE under specific, undisclosed conditions.\n\nBoth carry CVSS 9.8 scores.", "creation_timestamp": "2026-09-11T01:00:03.587145Z"} https://vulnerability.circl.lu/sighting/1d30ab38-64fa-4cf0-ad1c-a246dbf28242/export Fri, 11 Sep 2026 01:00:03 +0000 https://vulnerability.circl.lu/sighting/102288fe-8dc7-4066-bde3-fdd56887ed56/export {"uuid": "102288fe-8dc7-4066-bde3-fdd56887ed56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://t.me/thehackernews/10024", "content": "\u203c\ufe0f Check Point patched two critical VPN certificate flaws, CVE-2026-85102 and CVE-2026-85103, that could allow unauthenticated RCE under specific, undisclosed conditions.\n\nBoth carry CVSS 9.8 scores.\n\nWhat\u2019s affected and how to fix it: https://thehackernews.com/2026/09/check-point-discloses-two-98-rated-vpn.html", "creation_timestamp": "2026-09-11T00:00:36.011299Z"} {"uuid": "102288fe-8dc7-4066-bde3-fdd56887ed56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://t.me/thehackernews/10024", "content": "\u203c\ufe0f Check Point patched two critical VPN certificate flaws, CVE-2026-85102 and CVE-2026-85103, that could allow unauthenticated RCE under specific, undisclosed conditions.\n\nBoth carry CVSS 9.8 scores.\n\nWhat\u2019s affected and how to fix it: https://thehackernews.com/2026/09/check-point-discloses-two-98-rated-vpn.html", "creation_timestamp": "2026-09-11T00:00:36.011299Z"} https://vulnerability.circl.lu/sighting/102288fe-8dc7-4066-bde3-fdd56887ed56/export Fri, 11 Sep 2026 00:00:36 +0000 https://vulnerability.circl.lu/sighting/c0bf7855-e2b5-4002-88dd-2a4f734fd62b/export {"uuid": "c0bf7855-e2b5-4002-88dd-2a4f734fd62b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mv6gtzdqe72t", "content": "\ud83d\udd17 CVE : CVE-2026-85102, CVE-2026-85103", "creation_timestamp": "2026-09-10T16:10:14.611192Z"} {"uuid": "c0bf7855-e2b5-4002-88dd-2a4f734fd62b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mv6gtzdqe72t", "content": "\ud83d\udd17 CVE : CVE-2026-85102, CVE-2026-85103", "creation_timestamp": "2026-09-10T16:10:14.611192Z"} https://vulnerability.circl.lu/sighting/c0bf7855-e2b5-4002-88dd-2a4f734fd62b/export Thu, 10 Sep 2026 16:10:14 +0000 https://vulnerability.circl.lu/sighting/48ec9cab-3bdc-485f-8354-7f6323132237/export {"uuid": "48ec9cab-3bdc-485f-8354-7f6323132237", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mv6bajxkxg2f", "content": "CVE-2026-85103 is trending. Hype score 18, currently #2 on cvemon.\n\nA heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-85103", "creation_timestamp": "2026-09-10T14:29:52.328893Z"} {"uuid": "48ec9cab-3bdc-485f-8354-7f6323132237", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mv6bajxkxg2f", "content": "CVE-2026-85103 is trending. Hype score 18, currently #2 on cvemon.\n\nA heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-85103", "creation_timestamp": "2026-09-10T14:29:52.328893Z"} https://vulnerability.circl.lu/sighting/48ec9cab-3bdc-485f-8354-7f6323132237/export Thu, 10 Sep 2026 14:29:52 +0000 https://vulnerability.circl.lu/sighting/9ee7698a-b9d1-49de-93b2-9ad700d01b64/export {"uuid": "9ee7698a-b9d1-49de-93b2-9ad700d01b64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://t.me/thehackernews/10024", "content": "\u203c\ufe0f Check Point patched two critical VPN certificate flaws, CVE-2026-85102 and CVE-2026-85103, that could allow unauthenticated RCE under specific, undisclosed conditions.\n\nBoth carry CVSS 9.8 scores.\n\nWhat\u2019s affected and how to fix it: https://thehackernews.com/2026/09/check-point-discloses-two-98-rated-vpn.html", "creation_timestamp": "2026-09-10T14:00:04.794751Z"} {"uuid": "9ee7698a-b9d1-49de-93b2-9ad700d01b64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://t.me/thehackernews/10024", "content": "\u203c\ufe0f Check Point patched two critical VPN certificate flaws, CVE-2026-85102 and CVE-2026-85103, that could allow unauthenticated RCE under specific, undisclosed conditions.\n\nBoth carry CVSS 9.8 scores.\n\nWhat\u2019s affected and how to fix it: https://thehackernews.com/2026/09/check-point-discloses-two-98-rated-vpn.html", "creation_timestamp": "2026-09-10T14:00:04.794751Z"} https://vulnerability.circl.lu/sighting/9ee7698a-b9d1-49de-93b2-9ad700d01b64/export Thu, 10 Sep 2026 14:00:04 +0000 https://vulnerability.circl.lu/sighting/63b1cffc-e7f7-4b14-b918-aa2d2fcee475/export {"uuid": "63b1cffc-e7f7-4b14-b918-aa2d2fcee475", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mv62pcqdno2i", "content": "~Certeu~\nUnauthenticated remote code execution affects Check Point VPN appliances; apply hotfixes immediately.\n-\nIOCs: CVE-2026-85102, CVE-2026-85103\n-\n#CVE202685102 #CVE202685103 #ThreatIntel", "creation_timestamp": "2026-09-10T12:32:52.136711Z"} {"uuid": "63b1cffc-e7f7-4b14-b918-aa2d2fcee475", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mv62pcqdno2i", "content": "~Certeu~\nUnauthenticated remote code execution affects Check Point VPN appliances; apply hotfixes immediately.\n-\nIOCs: CVE-2026-85102, CVE-2026-85103\n-\n#CVE202685102 #CVE202685103 #ThreatIntel", "creation_timestamp": "2026-09-10T12:32:52.136711Z"} https://vulnerability.circl.lu/sighting/63b1cffc-e7f7-4b14-b918-aa2d2fcee475/export Thu, 10 Sep 2026 12:32:52 +0000 https://vulnerability.circl.lu/sighting/d4d8cb9e-4a63-4ba3-9d6c-863c47a14eab/export {"uuid": "d4d8cb9e-4a63-4ba3-9d6c-863c47a14eab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://www.ncsc.nl/alerts/kritieke-kwetsbaarheden-in-check-point-vpn-producten-met-actief-misbruik-verwacht-update-nu", "content": "", "creation_timestamp": "2026-09-10T12:15:09.969756Z"} {"uuid": "d4d8cb9e-4a63-4ba3-9d6c-863c47a14eab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-85103", "type": "seen", "source": "https://www.ncsc.nl/alerts/kritieke-kwetsbaarheden-in-check-point-vpn-producten-met-actief-misbruik-verwacht-update-nu", "content": "", "creation_timestamp": "2026-09-10T12:15:09.969756Z"} https://vulnerability.circl.lu/sighting/d4d8cb9e-4a63-4ba3-9d6c-863c47a14eab/export Thu, 10 Sep 2026 12:15:09 +0000