Vulnerability · Published Jul 22, 2026 · Assigned by checkpoint
CVE-2026-62145Local Privilege Escalation in Gaia Portal
High 7.5
In plain English
A high-severity privilege mismanagement in Quantum Security Gateway from checkpoint. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.4%top 66.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability in Check Point Gaia Portal allows an authenticated attacker with read-only Gaia Portal privileges to execute commands with root privileges.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| checkpoint | Quantum Security Gateway | R82.10 with Jumbo Hotfix Take 36 or belowR82 with Jumbo Hotfix Take 118 or belowR81.20 with Jumbo Hotfix Take 158 or belowR81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30 |
| checkpoint | Quantum Security Management | R82.10 with Jumbo Hotfix Take 36 or belowR82 with Jumbo Hotfix Take 118 or belowR81.20 with Jumbo Hotfix Take 158 or belowR81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30 |
Weakness: CWE-269 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H