Log in Start free

checkpoint

Products

ProductCVEsExploitedLatest
Quantum Security Gateway102Sep 9, 2026
Quantum Security Management72Sep 22, 2026
Multi-Domain Security Management21Jul 22, 2026
Spark Firewalls21Jun 8, 2026
Check Point Quantum Gateway, Spark Gateway and CloudGuard Network11May 28, 2024
Check Point Mobile Access3–Aug 6, 2025
Check Point SmartConsole2–Jun 29, 2025
Identity Agent2–Jun 11, 2026
Multi-Domain Security Management Server1–Aug 3, 2026
Security Management Server1–Aug 3, 2026
Check Point Harmony SASE1–Aug 12, 2025
ZoneAlarmExtremeSecurityNextGen,IdentityAgentforWindows,IdentityAgentforWindowsTerminalServer1–Apr 18, 2024
Check Point Management Log Server1–Aug 6, 2025
ClusterXL, Multi-Domain Security Management, Quantum Appliances, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Security Management1–Nov 7, 2024
Harmony Endpoint.1–Nov 12, 2023
Harmony Endpoint Security Client for Windows1–May 1, 2024
Hramony SASE1–Jan 14, 2026
Identity Awareness1–Dec 22, 2025
Multi-Domain Security Management, Quantum Security Management1–Feb 6, 2025

Exploited and recent CVEs

  • CVE-2026-93616 Critical 9.8 Exploited Directory Traversal and File upload allows execution of arbitrary script on the Management Server 91.6%
  • CVE-2026-85102 Critical 9.8 Exploited Improper Certificate Validation in Quantum Security Gateway 54.1%
  • CVE-2026-16232 Critical 9.3 Exploited Authentication Bypass in the SmartConsole Login Process Using an Application Token 3.5%
  • CVE-2026-16232 Critical 9.3 Exploited Authentication Bypass in the SmartConsole Login Process Using an Application Token 3.5%
  • CVE-2026-50751 Critical 9.3 Exploited User Authentication Bypass in VPN Remote Access and Mobile Access 85.3%
  • CVE-2026-50751 Critical 9.3 Exploited User Authentication Bypass in VPN Remote Access and Mobile Access 85.3%
  • CVE-2024-24919 High 8.6 Exploited Information disclosure 100.0%
  • CVE-2026-91843 Critical 9.8 Stack overflow in login process to the Security Management and Log Servers 0.5%
  • CVE-2026-85103 Critical 9.8 Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding 4.3%
  • CVE-2026-85103 Critical 9.8 Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding 4.3%
  • CVE-2026-18574 Critical 9.3 Authentication Bypass in Check Point Security Management Server 0.9%
  • CVE-2026-18574 Critical 9.3 Authentication Bypass in Check Point Security Management Server 0.9%
  • CVE-2026-62145 High 7.5 Local Privilege Escalation in Gaia Portal 0.4%
  • CVE-2026-62145 High 7.5 Local Privilege Escalation in Gaia Portal 0.4%
  • CVE-2026-62144 Critical 9.1 Management Authentication Bypass and Privilege Escalation 1.0%
  • CVE-2026-62144 Critical 9.1 Management Authentication Bypass and Privilege Escalation 1.0%
  • CVE-2026-10847 High 7.8 Local Privilege Escalation vulnerability in Check Point Identity Agent Full for Windows OS 0.1%
  • CVE-2026-50752 High 7.4 Certificate Validation Bypass in VPN Site-to-Site Connections Using IKEv1 4.7%
  • CVE-2026-50752 High 7.4 Certificate Validation Bypass in VPN Site-to-Site Connections Using IKEv1 4.7%
  • CVE-2026-48136 Medium 4.1 Authenticated Administrator Role-Based Access Control Bypass in Compliance 3.7%
  • CVE-2026-48135 Medium 5.3 HTTP service can incorrectly process malformed HTTP requests 2.6%
  • CVE-2026-48134 Medium 5.6 SQL injection issue in UserCheck Portal when DLP Software Blade is active 4.0%
  • CVE-2026-48133 High 7.5 Identity Awareness Captive Portal - Unauthenticated Local File Inclusion 4.5%
  • CVE-2026-48132 High 8.1 VPN service may restart unexpectedly when processing IKE traffic over NAT-T 4500/UDP 2.1%
  • CVE-2026-48131 High 8.1 VPND IKE Fragment Reassembly - Heap Out-of-Bounds Write via Sequence Number Zero 2.7%
  • CVE-2025-9142 High 7.5 Local privilege escalation in Harmony SASE Windows Agent <0.1%
  • CVE-2025-8305 Medium 6.5 Information Disclosure in Identity Agent Debug Files 0.1%
  • CVE-2025-8304 Medium 6.5 Information Disclosure in Identity Agent Registry Keys 0.1%
  • CVE-2025-3831 High 8.1 Exposed SFTP server 0.4%
  • CVE-2024-52885 Medium 5.0 Path Traversal 0.5%