checkpoint

Latest CVEs · RSS

• CVE-2026-93616 2026-09-22 · CVSS 9.8
  A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.
• CVE-2026-91843 2026-09-16 · CVSS 9.8
  A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges.
• CVE-2026-85103 2026-09-09 · CVSS 9.8
  A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Sec
• CVE-2026-85102 2026-09-09 · CVSS 9.8
  Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arb
• CVE-2026-18574 2026-08-03 · CVSS 9.3
  An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server (MDS) could allow an unauthenticate
• CVE-2026-62145 2026-07-22 · CVSS 7.5
  A vulnerability in Check Point Gaia Portal allows an authenticated attacker with read-only Gaia Portal privileges to execute commands with root privileges.
• CVE-2026-62144 2026-07-22
  An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to exec
• CVE-2026-16232 2026-07-22 · CVSS 9.3
  An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login to
• CVE-2026-10847 2026-06-11 · CVSS 7.8
  A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS. An authenticated local user may be able to execute arbitrar
• CVE-2026-50751 2026-06-08
  A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to by
• CVE-2026-50752 2026-06-08 · CVSS 7.4
  A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an unauthenticated attacker positioned as a man-in-the-middle to b
• CVE-2026-48136 2026-05-26 · CVSS 4.1
  When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain (CMA) can modi
• CVE-2026-48135 2026-05-26 · CVSS 5.3
  A Check Point HTTP-based service can incorrectly handle malformed HTTP requests. The issue is related to HTTP request parsing and validation.
• CVE-2026-48134 2026-05-26 · CVSS 5.6
  When the DLP is active, the UserCheck Web Portal contains an input-handling issue in the UserChoice flow. Under specific conditions, an attacker who can access
• CVE-2026-48133 2026-05-26 · CVSS 7.5
  When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to read certain internal files on the Securi
• CVE-2026-48132 2026-05-26 · CVSS 8.1
  The Security Gateway does not correctly validate a length value in certain IKE packets when NAT-T is used (4500/UDP). As a result, a specially crafted or malfor
• CVE-2026-48131 2026-05-26 · CVSS 8.1
  The VPN service may mishandle an unexpected IKE fragment value received on the IKE port 500/UDP during the early stage of a connection attempt. This can cause t
• CVE-2026-3502 2026-03-30 · CVSS 7.8
  TrueConf Client downloads application update code and applies it without performing verification. An attacker who is able to influence the update delivery path
• CVE-2025-9142 2026-01-14 · CVSS 7.5
  A local user can trigger Harmony SASE Windows client to write or delete files outside the intended certificate working directory.
• CVE-2025-8305 2025-12-22 · CVSS 6.5
  An authenticated local user can obtain information that allows claiming security policy rules of another user due to sensitive information being printed in plai
• CVE-2025-8304 2025-12-22 · CVSS 6.5
  An authenticated local user can obtain information that allows claiming security policy rules of another user due to sensitive information being accessible in t
• CVE-2025-3831 2025-08-12 · CVSS 8.1
  Log files uploaded during troubleshooting by the Harmony SASE agent may have been accessible to unauthorized parties.
• CVE-2024-52885 2025-08-06 · CVSS 5.0
  The Mobile Access Portal's File Share application is vulnerable to a directory traversal attack, allowing an authenticated, malicious end-user (authorized to at
• CVE-2025-2028 2025-08-06 · CVSS 6.5
  Lack of TLS validation when downloading a CSV file including mapping from IPs to countries used ONLY for displaying country flags in logs
• CVE-2024-24915 2025-06-29 · CVSS 6.1
  Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and fetch them.