cve recordexploit reported

CVE-2026-85103

CVSS—

Severitynone

Weakness—

EPSS4.3%91.1th percentile

Exploited1 KEV source

patch window

Called exploited 16 days after disclosure.

Measured from the CVE publication date to the earliest of 1 KEV catalogue that list it.

The life of this vulnerability

CVE reservedSep 3, 2026
CVE publishedSep 9, 20266d
First KEV listingSep 25, 202616d
Last sightingOct 13, 202618d

Gaps are compressed to equal steps. The elapsed time is printed under each.

Which catalogues call it exploited

CISA KEVUS federaldoes not list it
EUVDENISA, European Unionlisted Sep 25, 2026
VulnCheck KEVcommercial researchdoes not list it
CIRCLaggregator, mirrors the abovedoes not list it

Sources1 of 3

Listings differ by—

This rests on a single catalogue. No second catalogue corroborates the claim that it is being exploited. CIRCL is an aggregator and is not counted.

Public exploitation evidence

exploitedSep 15, 2026t.me/BleepingComputer/25548
seenOct 13, 2026bsky.app/profile/getpokemon7.bsky.social/post/3mxr2dhtcos24
seenSep 17, 2026bsky.app/profile/cyfar.ca/post/3mvorgubgqo2p
seenSep 16, 2026bsky.app/profile/cyberhub.blog/post/3mvlx6m26lk2p
seenSep 15, 2026t.me/CyberSecurityIL/87218
seenSep 14, 2026bsky.app/profile/igalog.bsky.social/post/3mvjc5gxhbo2l

54 public reports collected from VulnCheck and CIRCL, first on Sep 9, 2026. Each links to its original source. We have not verified them.

Description

References

← Back to the CVE Tracker

Our coverage of CVE-2026-85103

CVE-2026-85102Sep 12, 2026critical

Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent

The Dutch Nationaal Cyber Security Centrum (NCSC) has issued a warning regarding the imminent exploitation of two critical vulnerabilities in Check Point VPN products, identified as CVE-2026-85102 and CVE-2026-85103. The agency has assessed the likelihood of exploitation and the potential impact as high, urging organizations to apply security updates promptly.