Checkpoint vulnerabilities

Products

• Firewall-1 43
• Endpoint Security 14
• Vpn-1 14
• Zonealarm 14
• Quantum Security Gateway 10
• Security Gateway 8
• Quantum Security Management 7
• Gaia Os 6
• Connectra Ngx 4
• Provider-1 4
• Remote Access Clients 4
• Check Point Mobile Access 3
• Check Point Smartconsole 3
• Endpoint Security Clients 3
• Mobile Access 3
• Quantum Security Management 3
• Remote Access Vpn 3
• Smartconsole 3
• Zonealarm Extreme Security 3
• Capsule Docs Standalone Client 2
• Gaia Embedded 2
• Gaia Portal 2
• Harmony Endpoint. 2
• Harmony Endpoint 2
• Identity Agent 2
• Identity Agent 2
• Multi-domain Security Management 2
• Multi-domain Security Management 2
• Next Generation 2
• Quantum Security Gateway Firmware 2
• Spark Firewalls 2
• Ssl Network Extender 2
• Vpn-1 Firewall-1 2
• Vpn-1 Secureclient 2
• Zonealarm Extreme Security Nextgen 2

Newest

• check point multiple products, checkpoint multi-domain security management, quantum security management +2 more Directory Traversal and File upload allows execution of arbitrary script on the Management Server CVE-2026-93616 In KEVPublic exploit EPSS 91.6% 9.8 CriticalSeptember 22, 2026
• checkpoint quantum security management Stack overflow in login process to the Security Management and Log Servers CVE-2026-91843 Public exploit 9.8 CriticalSeptember 16, 2026
• checkpoint quantum security gateway, quantum security management +1 more Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding CVE-2026-85103 9.8 CriticalSeptember 9, 2026
• checkpoint quantum security gateway, check point multiple products, checkpoint gaia embedded +1 more +3 more Improper Certificate Validation in Quantum Security Gateway CVE-2026-85102 In KEVPublic exploit EPSS 54.1% 9.8 CriticalSeptember 9, 2026
• checkpoint multi-domain security management server, security management server +1 more Authentication Bypass in Check Point Security Management Server CVE-2026-18574 Public exploit 9.3 CriticalAugust 3, 2026
• checkpoint quantum security gateway, quantum security management +1 more Local Privilege Escalation in Gaia Portal CVE-2026-62145 7.5 HighJuly 22, 2026
• checkpoint multi-domain security management, quantum security management +1 more Management Authentication Bypass and Privilege Escalation CVE-2026-62144 9.1 CriticalJuly 22, 2026
• check point smartconsole, checkpoint multi-domain security management, quantum security management +2 more Authentication Bypass in the SmartConsole Login Process Using an Application Token CVE-2026-16232 In KEVPublic exploit 9.3 CriticalJuly 22, 2026
• checkpoint identity agent Local Privilege Escalation vulnerability in Check Point Identity Agent Full for Windows OS CVE-2026-10847 7.8 HighJune 11, 2026
• check point security gateway, checkpoint gaia embedded, gaia os +2 more +4 more User Authentication Bypass in VPN Remote Access and Mobile Access CVE-2026-50751 In KEVPublic exploit EPSS 85.3% 9.3 CriticalJune 8, 2026
• checkpoint quantum security gateway, spark firewalls +1 more Certificate Validation Bypass in VPN Site-to-Site Connections Using IKEv1 CVE-2026-50752 7.4 HighJune 8, 2026
• checkpoint quantum security management Authenticated Administrator Role-Based Access Control Bypass in Compliance CVE-2026-48136 4.1 MediumMay 26, 2026
• checkpoint quantum security gateway HTTP service can incorrectly process malformed HTTP requests CVE-2026-48135 5.3 MediumMay 26, 2026
• checkpoint quantum security gateway SQL injection issue in UserCheck Portal when DLP Software Blade is active CVE-2026-48134 5.6 MediumMay 26, 2026
• checkpoint quantum security gateway Identity Awareness Captive Portal - Unauthenticated Local File Inclusion CVE-2026-48133 7.5 HighMay 26, 2026
• checkpoint quantum security gateway VPN service may restart unexpectedly when processing IKE traffic over NAT-T 4500/UDP CVE-2026-48132 8.1 HighMay 26, 2026
• checkpoint quantum security gateway VPND IKE Fragment Reassembly - Heap Out-of-Bounds Write via Sequence Number Zero CVE-2026-48131 8.1 HighMay 26, 2026
• checkpoint hramony sase Local privilege escalation in Harmony SASE Windows Agent CVE-2025-9142 7.5 HighJanuary 14, 2026
• checkpoint identity awareness Information Disclosure in Identity Agent Debug Files CVE-2025-8305 6.5 MediumDecember 22, 2025
• checkpoint identity agent Information Disclosure in Identity Agent Registry Keys CVE-2025-8304 6.5 MediumDecember 22, 2025
• checkpoint harmony sase, check point harmony sase +1 more Exposed SFTP server CVE-2025-3831 8.1 HighAugust 12, 2025
• checkpoint mobile access, check point mobile access, remote access vpn +2 more Path Traversal CVE-2024-52885 5.0 MediumAugust 6, 2025
• checkpoint check point management log server, log server +1 more Lack of TLS validation CVE-2025-2028 6.5 MediumAugust 6, 2025
• checkpoint smartconsole, check point smartconsole +1 more SmartConsole Sensitive Credential Exposure via Memory Dump CVE-2024-24915 6.1 MediumJune 29, 2025
• checkpoint check point smartconsole, smartconsole +1 more DLL-HiJacking CVE-2024-24916 6.5 MediumJune 19, 2025
• checkpoint check point mobile access, mobile access, remote access vpn +2 more Stored-XSS CVE-2024-52888 5.4 MediumApril 27, 2025
• checkpoint check point mobile access, mobile access, remote access vpn +2 more Self-XSS CVE-2024-52887 3.5 LowApril 27, 2025
• checkpoint gaia os, multi-domain security management, quantum security management +1 more Out of Bounds read in the CPCA process on Check Point Management Server CVE-2024-24911 5.3 MediumFebruary 6, 2025
• check point zonealarm extreme security, checkpoint zonealarm extreme security nextgen +1 more Check Point ZoneAlarm Extreme Security Link Following Local Privilege Escalation Vulnerability CVE-2024-6233 7.8 HighNovember 22, 2024
• checkpoint clusterxl, clusterxl, multi-domain security management, quantum appliances, quantum maestro, quantum scalable chassis, quantum security gateways, quantum security management, gaia os +6 more +8 more Authenticated Gaia users can inject code or commands by global variables through special HTTP... CVE-2024-24914 8.0 HighNovember 7, 2024
• check point quantum security gateways, checkpoint check point quantum gateway, spark gateway and cloudguard network, cloudguard network +4 more +6 more Information disclosure CVE-2024-24919 In KEVPublic exploit EPSS 100.0% 8.6 HighMay 28, 2024
• checkpoint harmony endpoint security client for windows, harmony endpoint +1 more Local privilege escalation in Harmony Endpoint Security Client for Windows via crafted DLL file CVE-2024-24912 6.7 MediumMay 1, 2024
• checkpoint identity agent, zonealarm extreme security nextgen, identity agent for windows, identity agent for windows terminal server, zonealarm extreme security +2 more +4 more LocalprivilegeescalationinCheckPointZoneAlarmExtremeSecurityNextGen,IdentityAgentforWindows,andIdentityAgentforWindowsTerminalServerviacraftedDLLfile CVE-2024-24910 7.3 HighApril 18, 2024
• checkpoint endpoint security, harmony endpoint. +1 more Local Privliege Escalation in Check Point Endpoint Security Remediation Service CVE-2023-28134 7.8 HighNovember 12, 2023
• checkpoint gaia portal Local user may lead to privilege escalation using Gaia Portal hostnames page. CVE-2023-28130 EPSS 20.9% 7.2 HighJuly 26, 2023
• checkpoint endpoint security, harmony endpoint. +1 more Local privilege escalation in Check Point Endpoint Security Client (version E87.30) via crafted... CVE-2023-28133 7.8 HighJuly 23, 2023
• checkpoint ssl network extender The IPsec VPN blade has a dedicated portal for downloading and connecting through SSL Network... CVE-2022-23746 7.5 HighNovember 30, 2022
• checkpoint zonealarm Check Point ZoneAlarm Extreme Security before 15.8.211.19229 allows local users to escalate... CVE-2022-41604 8.8 HighSeptember 27, 2022
• checkpoint capsule workspace A potential memory corruption issue was found in Capsule Workspace Android app (running on... CVE-2022-23745 EPSS 16.9% 7.5 HighJuly 18, 2022
• checkpoint endpoint security, harmony endpoint +1 more Check Point Endpoint Security Client E83 through E86 before E86.50 does not protect against a... CVE-2022-23744 2.3 LowJuly 7, 2022
• check point endpoint security client for windows, checkpoint endpoint security +1 more Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for... CVE-2022-23742 7.8 HighMay 12, 2022
• checkpoint gaia os, gaia portal +1 more The Check Point Gaia Portal's GUI Clients allowed authenticated administrators with permission... CVE-2021-30361 6.7 MediumMay 11, 2022
• checkpoint zonealarm Check Point ZoneAlarm before version 15.8.200.19118 allows a local actor to escalate privileges... CVE-2022-23743 7.8 HighMay 11, 2022
• checkpoint endpoint security Users have access to the directory where the installation repair occurs. Since the MS Installer... CVE-2021-30360 7.8 HighJanuary 7, 2022
• checkpoint harmony browse, sandblast agent for browsers +1 more The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to... CVE-2021-30359 7.8 HighOctober 22, 2021
• checkpoint mobile access portal agent Mobile Access Portal Native Applications who's path is defined by the administrator with... CVE-2021-30358 EPSS 27.5% 7.2 HighOctober 19, 2021
• checkpoint ssl network extender SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the... CVE-2021-30357 Public exploit EPSS 22.8% 5.3 MediumJune 8, 2021
• checkpoint identity agent A denial of service vulnerability was reported in Check Point Identity Agent before R81.018.0000,... CVE-2021-30356 8.1 HighApril 22, 2021
• openssl, checkpoint multi-domain management firmware, quantum security gateway firmware +103 more +105 more NULL pointer deref in signature_algorithms processing CVE-2021-3449 Public exploitFix available EPSS 63.5% 5.9 MediumMarch 25, 2021
• checkpoint check point smartconsole, smartconsole +1 more Check Point SmartConsole before R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415... CVE-2020-6024 7.8 HighJanuary 20, 2021
• Show olderLoading…