IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al

checkpoint güvenlik açıkları (CVE)

checkpoint için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

quantum_security_gateway 13quantum_security_management 10identity_agent 3mobile access 3gaia os 3Multi-Domain Security Management 3remote access vpn 3Check Point Mobile Access 3smartconsole 2Spark Firewalls 2gaia embedded 2harmony_endpoint 2security gateway 2Check Point SmartConsole 2harmony sase 1quantum_maestro 1cloudguard_network 1Hramony SASE 1quantum_scalable_chassis 1cloudguard network security 1clusterxl 1zonealarm_extreme_security 1Identity Awareness 1quantum_security_gateway_firmware 1ClusterXL, Multi-Domain Security Management, Quantum Appliances, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Security Management 1ZoneAlarmExtremeSecurityNextGen,IdentityAgentforWindows,IdentityAgentforWindowsTerminalServer 1log server 1firewall-1 1quantum_spark_appliances 1multi-domain_management 1Check Point Harmony SASE 1quantum spark firmware 1Check Point Management Log Server 1gaia_portal 1Multi-Domain Security Management, Quantum Security Management 1Scalable Platforms (ElasticXL, Maestro, Chassis) 1Multi-Domain Security Management Server 1Check Point Quantum Gateway, Spark Gateway and CloudGuard Network 1Harmony Endpoint Security Client for Windows 1quantum_appliances 1
40 sonuç
9.8Kritik
CVE-2026-85103

Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding

checkpoint Quantum Security Gateway; checkpoint Quantum Security Management

A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.

4.3%EPSS
9.3Kritik
CVE-2026-18574

Authentication Bypass in Check Point Security Management Server

checkpoint Security Management Server; checkpoint Multi-Domain Security Management Server

An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server (MDS) could allow an unauthenticated remote attacker with network access to Management services to execute arbitrary commands on the S…

7.5Yüksek
CVE-2026-62145

Local Privilege Escalation in Gaia Portal

checkpoint Quantum Security Gateway; checkpoint Quantum Security Management

A vulnerability in Check Point Gaia Portal allows an authenticated attacker with read-only Gaia Portal privileges to execute commands with root privileges.

9.1Kritik
CVE-2026-62144

Management Authentication Bypass and Privilege Escalation

checkpoint Quantum Security Management; checkpoint Multi-Domain Security Management

An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow comman…

1.0%EPSS
9.3Kritik
CVE-2026-16232 KEV

Authentication Bypass in the SmartConsole Login Process Using an Application Token

checkpoint Quantum Security Management; checkpoint Multi-Domain Security Management

An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows …

3.5%EPSS
9.3Kritik
CVE-2026-50751 KEV Fidye yazılımında kullanılıyor

User Authentication Bypass in VPN Remote Access and Mobile Access

checkpoint Quantum Security Gateway; checkpoint Spark Firewalls

A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.

85%EPSS
7.4Yüksek
CVE-2026-50752

Certificate Validation Bypass in VPN Site-to-Site Connections Using IKEv1

checkpoint Quantum Security Gateway; checkpoint Spark Firewalls

A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an unauthenticated attacker positioned as a man-in-the-middle to bypass certificate validation in VPN site-to-site connections that use certificate-based authenticat…

4.7%EPSS
6.5Orta
CVE-2025-8305

Information Disclosure in Identity Agent Debug Files

checkpoint Identity Awareness

An authenticated local user can obtain information that allows claiming security policy rules of another user due to sensitive information being printed in plaintext in Identity Agent for Terminal Services debug files.

6.5Orta
CVE-2025-8304

Information Disclosure in Identity Agent Registry Keys

checkpoint Identity Agent

An authenticated local user can obtain information that allows claiming security policy rules of another user due to sensitive information being accessible in the Windows Registry keys for Check Point Identity Agent running on a Terminal Server.

8.1Yüksek
CVE-2025-3831

Exposed SFTP server

checkpoint Check Point Harmony SASE

Log files uploaded during troubleshooting by the Harmony SASE agent may have been accessible to unauthorized parties.

5.0Orta
CVE-2024-52885

Path Traversal

checkpoint Check Point Mobile Access

The Mobile Access Portal's File Share application is vulnerable to a directory traversal attack, allowing an authenticated, malicious end-user (authorized to at least one File Share application) to list the file names of 'nobody'-accessible directories on the…