IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
7.3Alta

CVE-2026-107484Input Validation Vulnerability in Gaia Portal backend handlers allows privilege escalation by an authenticated user

checkpoint Quantum Security Gateway; checkpoint Quantum Security Management Publicada: (hace 1 hora)

Descripción

An input and authorization validation vulnerability in Gaia Portal backend handlers could allow an authenticated, non-administrative user to perform privileged operations that should be restricted to administrators.

Debilidad (CWE): CWE-269

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
checkpoint Quantum Security Gateway R82.10 with Jumbo Hotfix Take 50 or below, R82 with Jumbo Hotfix Take 130 or below, R81.20 with Jumbo Hotfix Take 173 or below
checkpoint Quantum Security Management R82.10 with Jumbo Hotfix Take 50 or below, R82 with Jumbo Hotfix Take 130 or below, R81.20 with Jumbo Hotfix Take 173 or below

Referencias y parches

CVE recientes del mismo producto — Check Point

9.8Crítica
CVE-2026-85103

Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding

checkpoint Quantum Security Gateway; checkpoint Quantum Security Management

A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.

4.3%EPSS