IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
7.3Yüksek

CVE-2026-107484Input Validation Vulnerability in Gaia Portal backend handlers allows privilege escalation by an authenticated user

checkpoint Quantum Security Gateway; checkpoint Quantum Security Management Yayım: (1 saat önce)

Açıklama

An input and authorization validation vulnerability in Gaia Portal backend handlers could allow an authenticated, non-administrative user to perform privileged operations that should be restricted to administrators.

Zayıflık türü (CWE): CWE-269

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
checkpoint Quantum Security Gateway R82.10 with Jumbo Hotfix Take 50 or below, R82 with Jumbo Hotfix Take 130 or below, R81.20 with Jumbo Hotfix Take 173 or below
checkpoint Quantum Security Management R82.10 with Jumbo Hotfix Take 50 or below, R82 with Jumbo Hotfix Take 130 or below, R81.20 with Jumbo Hotfix Take 173 or below

Kaynaklar ve yamalar

Aynı üründe son açıklar — Check Point

9.8Kritik
CVE-2026-85103

Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding

checkpoint Quantum Security Gateway; checkpoint Quantum Security Management

A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.

4.3%EPSS