Checkpoint vulnerabilities
33 CVEs and advisories name Checkpoint as an affected vendor, 5 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-93616Directory Traversal and File upload allows execution of arbitrary script on the Management Server
- CVE-2026-91843Stack overflow in login process to the Security Management and Log Servers
- CVE-2026-85103Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding
- CVE-2026-85102Improper Certificate Validation in Quantum Security Gateway
- CVE-2026-18574Authentication Bypass in Check Point Security Management Server
- CVE-2026-62145Local Privilege Escalation in Gaia Portal
- CVE-2026-62144Management Authentication Bypass and Privilege Escalation
- CVE-2026-16232Authentication Bypass in the SmartConsole Login Process Using an Application Token
- CVE-2026-10847Local Privilege Escalation vulnerability in Check Point Identity Agent Full for Windows OS
- CVE-2026-50751User Authentication Bypass in VPN Remote Access and Mobile Access
- CVE-2026-50752Certificate Validation Bypass in VPN Site-to-Site Connections Using IKEv1
- CVE-2026-48136Authenticated Administrator Role-Based Access Control Bypass in Compliance
- CVE-2026-48135HTTP service can incorrectly process malformed HTTP requests
- CVE-2026-48134SQL injection issue in UserCheck Portal when DLP Software Blade is active
- CVE-2026-48133Identity Awareness Captive Portal - Unauthenticated Local File Inclusion
- CVE-2026-48132VPN service may restart unexpectedly when processing IKE traffic over NAT-T 4500/UDP
- CVE-2026-48131VPND IKE Fragment Reassembly - Heap Out-of-Bounds Write via Sequence Number Zero
- CVE-2025-9142Local privilege escalation in Harmony SASE Windows Agent
- CVE-2025-8305Information Disclosure in Identity Agent Debug Files
- CVE-2025-8304Information Disclosure in Identity Agent Registry Keys
- CVE-2025-3831Exposed SFTP server
- CVE-2024-52885Path Traversal
- CVE-2025-2028Lack of TLS validation
- CVE-2024-24915SmartConsole Sensitive Credential Exposure via Memory Dump
- CVE-2024-24916DLL-HiJacking
- CVE-2024-52888Stored-XSS
- CVE-2024-52887Self-XSS
- CVE-2024-24911Out of Bounds read in the CPCA process on Check Point Management Server
- CVE-2024-24914Authenticated Gaia users can inject code or commands by global variables through special HTTP requests.
- CVE-2024-24919Information disclosure