CVE-2026-85102 CISA KEV · Actively exploitedSuited to automated attack · CISA
Improper Certificate Validation in Quantum Security Gateway
CVSS score
9.8
EPSS probability
%7.5
Risk score
1.5
Published
1 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
Authentication Bypass and Remote Code Execution in Remote Access and Site-to-Site VPN
Makefile Go / Python
Similar Vulnerabilities
8.6
CVE-2024-24919 Actively exploited
Information disclosure
C
Patch verified Public Exploits:10EPSS %100
9.3
CVE-2026-50751 Actively exploited
User Authentication Bypass in VPN Remote Access and Mobile Access
C
Patch verified Public Exploits:8EPSS %85
9.3
CVE-2026-16232 Actively exploited
Authentication Bypass in the SmartConsole Login Process Using an Application Token
C
Patch verified Public Exploits:3EPSS %78
9.8
CVE-2026-93616 Actively exploited
Directory Traversal and File upload allows execution of arbitrary script on the Management Server
C
Patch verified Public Exploits:3EPSS %20
5.9
CVE-2021-3449
NULL pointer deref in signature_algorithms processing
O
Patch verifiedEPSS %64
9.8
CVE-2026-85103
Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding
C
Patch status unknownEPSS %4
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-85102"