Check Point has addressed two significant vulnerabilities in its firewall and management tools, which could permit an unauthenticated remote attacker to execute code under certain circumstances This article explores cybersecurity advisory canadian. . The second vulnerability, CVE-2026-85103, is a heap-based buffer overflow that occurs during the decoding of a VPN certificate's ASN.1 structure.
The identical affected list includes R82.10 with Jumbo Hotfix Take 43 or lower, R82 with Jumbo Hotfix Take 125 or lower, and R81.20 with Jumbo Hotfix Take 165 or lower. The list includes three Quantum branches and lacks version information for anything else. A cybersecurity advisory from the Canadian Center for Cybersecurity was released the same day, detailing a wider range of products but does not mention any specific versions.
The staff member explained that the issue pertains to certificate processing, which could theoretically occur in an environment without a VPN but with existing VPN certificates. The same customer felt the advisory's mitigation was vague and suggested commenting out implied rules for the VPN, which they couldn't act on. One customer later noted that the advisory links still failed in two browsers, whereas the link in the Live Patch article worked.
Neither Check Point's notification nor any publicly disclosed records address which Spark or Security Management versions are impacted, which specific builds include the fix, or what conditions the company specifies the flaws require.
