Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

checkpoint vulnerabilities

33 published CVEs name checkpoint among the affected products; CISA lists 5 of them as exploited in the wild.

All 33 in the listAtom feed of new CVEs
Published CVEs
33
Last 12 months
20
Critical
8
Known exploited
5

Critical 8High 12Medium 12Low 1Not scored 0

CVEs per yearBy the year they were published

  1. 20231
  2. 20244
  3. 202510
  4. 202618

Known exploitedNewest addition to KEV first

  • CVE-2026-93616

    Directory Traversal and File upload allows execution of arbitrary script on the Management Server

    checkpoint · Quantum Security Management

    ExploitedCritical9.8
  • CVE-2026-85102

    Improper Certificate Validation in Quantum Security Gateway

    checkpoint · Quantum Security Gateway

    ExploitedCritical9.8
  • CVE-2026-16232

    Authentication Bypass in the SmartConsole Login Process Using an Application Token

    checkpoint · Quantum Security Management

    ExploitedCritical9.3
  • CVE-2026-50751

    User Authentication Bypass in VPN Remote Access and Mobile Access

    checkpoint · Quantum Security Gateway

    ExploitedCritical9.3
  • CVE-2024-24919

    Information disclosure

    checkpoint · Check Point Quantum Gateway, Spark Gateway and CloudGuard Network

    ExploitedHigh8.6

Newest CVEs

  • CVE-2026-93616

    Directory Traversal and File upload allows execution of arbitrary script on the Management Server

    checkpoint · Quantum Security Management

    ExploitedCritical9.8
  • CVE-2026-91843

    Stack overflow in login process to the Security Management and Log Servers

    checkpoint · Quantum Security Management

    Critical9.8
  • CVE-2026-85103

    Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding

    checkpoint · Quantum Security Gateway

    Critical9.8
  • CVE-2026-85102

    Improper Certificate Validation in Quantum Security Gateway

    checkpoint · Quantum Security Gateway

    ExploitedCritical9.8
  • CVE-2026-18574

    Authentication Bypass in Check Point Security Management Server

    checkpoint · Security Management Server

    Critical9.3
  • CVE-2026-62145

    Local Privilege Escalation in Gaia Portal

    checkpoint · Quantum Security Gateway

    High7.5
  • CVE-2026-62144

    Management Authentication Bypass and Privilege Escalation

    checkpoint · Quantum Security Management

    Critical9.1
  • CVE-2026-16232

    Authentication Bypass in the SmartConsole Login Process Using an Application Token

    checkpoint · Quantum Security Management

    ExploitedCritical9.3
  • CVE-2026-10847

    Local Privilege Escalation vulnerability in Check Point Identity Agent Full for Windows OS

    checkpoint · Identity Agent

    High7.8
  • CVE-2026-50751

    User Authentication Bypass in VPN Remote Access and Mobile Access

    checkpoint · Quantum Security Gateway

    ExploitedCritical9.3

Products with the most CVEs

  1. Quantum Security Gateway10
  2. Quantum Security Management7
  3. Check Point Mobile Access3
  4. Check Point SmartConsole2
  5. Identity Agent2
  6. Multi-Domain Security Management2
  7. Spark Firewalls2
  8. Check Point Harmony SASE1
  9. Check Point Management Log Server1
  10. Check Point Quantum Gateway, Spark Gateway and CloudGuard Network1

Most common weaknesses

  1. CWE-200 Exposure of sensitive information4
  2. CWE-122 Heap-based buffer overflow3
  3. CWE-22 Path traversal3
  4. CWE-287 Improper authentication3
  5. CWE-295 Improper certificate validation3
  6. CWE-732 3
  7. CWE-125 Out-of-bounds read2
  8. CWE-427 Uncontrolled search path element2
  9. CWE-79 Cross-site scripting (XSS)2
  10. CWE-89 SQL injection2