【出處:台灣電腦緊急應變小組 TWCert】

◎ 內容說明
Check Point 針對旗下產品旗下產品Security Gateway、Security Management Server與Spa
rk Firewall 發布重大資安漏洞公告 (CVE-2026-85102，CVSS：9.8 和 CVE-2026-85103，CV
SS：9.8)，詳細漏洞說明請參閱「漏洞資訊」。
◎ 影響平台
【CVE-2026-85102】
Security Gateway, Spark Firewall (Centrally Managed), Spark Firewall (Locally Man
aged) R81 (EOS), R81.10 (EOS), R81.10.X, R81.10.X, R81.20, R82, R82.00.X, R82.00.
X, R82.10
【CVE-2026-85103】
Security Gateway, Security Management Server, Spark Firewall (Centrally Managed),
Spark Firewall (Locally Managed) R81 (EOS), R81 (EOS), R81.10 (EOS), R81.10 (EOS
), R81.10.X, R81.10.X, R81.20, R81.20, R82, R82, R82.00.X, R82.00.X, R82.10, R82.
10
◎ 建議措施
根據官方網站釋出的解決方式進行修補
◎ 漏洞資訊
名稱描述
CVE-2026-85102 VPN協商期間憑證資料驗證不當可能導致未經身分驗證的遠端攻擊者
在Security Gateway 執行任意程式碼。
CVE-2026-85103 此為heap溢位漏洞，存在於VPN 憑證 ASN.1 解碼流程中，可能允許
遠端攻擊者在management 和 Security Gateway上遠端執行任意程
式碼。
◎ 參考資訊
CVE-2026-85102 - Authentication Bypass and Remote Code Execution in Remote Access
and Site-to-Site VPN
https://support.checkpoint.com/results/sk/sk1000117/
TLP:CLEAR TWCERT-TWISAC-202609-0036
2
CVE-2026-85103 - ASN.1 decoding heap overflow leading to a remote code execution
https://support.checkpoint.com/results/sk/sk1000118/
CVE-2026-85102
https://nvd.nist.gov/vuln/detail/cve-2026-85102
CVE-2026-85103
https://nvd.nist.gov/vuln/detail/cve-2026-85103