https://vulnogram.org/ Most recent CVEs assigned by Check Point Software Ltd. (checkpoint). https://vulnogram.org/seaview/icons/checkpoint.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2026-93616 https://vulnogram.org/CVE-2026-93616 A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server. Critical Known Exploited Network Exploitable Tue, 22 Sep 2026 12:59:01 GMT https://vulnogram.org/CVE-2026-91843 https://vulnogram.org/CVE-2026-91843 A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges. Critical Network Exploitable Wed, 16 Sep 2026 13:03:40 GMT https://vulnogram.org/CVE-2026-85103 https://vulnogram.org/CVE-2026-85103 A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems. Critical Network Exploitable Wed, 09 Sep 2026 13:00:42 GMT https://vulnogram.org/CVE-2026-85102 https://vulnogram.org/CVE-2026-85102 Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway. Critical Known Exploited Network Exploitable Wed, 09 Sep 2026 13:00:31 GMT https://vulnogram.org/CVE-2026-18574 https://vulnogram.org/CVE-2026-18574 An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server (MDS) could allow an unauthenticated remote attacker with network access to Management services to execute arbitrary commands… Critical Network Exploitable Mon, 03 Aug 2026 12:07:33 GMT https://vulnogram.org/CVE-2026-62145 https://vulnogram.org/CVE-2026-62145 A vulnerability in Check Point Gaia Portal allows an authenticated attacker with read-only Gaia Portal privileges to execute commands with root privileges. High Wed, 22 Jul 2026 13:53:53 GMT https://vulnogram.org/CVE-2026-62144 https://vulnogram.org/CVE-2026-62144 An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also all… Critical Network Exploitable Wed, 22 Jul 2026 13:53:35 GMT https://vulnogram.org/CVE-2026-16232 https://vulnogram.org/CVE-2026-16232 An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitatio… Critical Known Exploited Network Exploitable Wed, 22 Jul 2026 13:53:09 GMT https://vulnogram.org/CVE-2026-10847 https://vulnogram.org/CVE-2026-10847 A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS. An authenticated local user may be able to execute arbitrary code with SYSTEM privileges due to improper handling of executable resolution during the… High Thu, 11 Jun 2026 13:52:11 GMT https://vulnogram.org/CVE-2026-50751 https://vulnogram.org/CVE-2026-50751 A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user… Critical Known Exploited Network Exploitable Mon, 08 Jun 2026 11:07:15 GMT https://vulnogram.org/CVE-2026-50752 https://vulnogram.org/CVE-2026-50752 A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an unauthenticated attacker positioned as a man-in-the-middle to bypass certificate validation in VPN site-to-site connections that use certificate-based au… High Network Exploitable Mon, 08 Jun 2026 11:00:38 GMT https://vulnogram.org/CVE-2026-48136 https://vulnogram.org/CVE-2026-48136 When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain (CMA) can modify stored metadata associated with Compliance Best Practices in another Management Domain,… Medium Tue, 26 May 2026 12:57:29 GMT https://vulnogram.org/CVE-2026-48135 https://vulnogram.org/CVE-2026-48135 A Check Point HTTP-based service can incorrectly handle malformed HTTP requests. The issue is related to HTTP request parsing and validation. Medium Network Exploitable Tue, 26 May 2026 12:57:19 GMT https://vulnogram.org/CVE-2026-48134 https://vulnogram.org/CVE-2026-48134 When the DLP is active, the UserCheck Web Portal contains an input-handling issue in the UserChoice flow. Under specific conditions, an attacker who can access the UserCheck Ask page could attempt to manipulate the Security Gateway's stored DLP/UserC… Medium Network Exploitable Tue, 26 May 2026 12:57:07 GMT https://vulnogram.org/CVE-2026-48133 https://vulnogram.org/CVE-2026-48133 When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to read certain internal files on the Security Gateway. High Network Exploitable Tue, 26 May 2026 12:56:56 GMT https://vulnogram.org/CVE-2026-48132 https://vulnogram.org/CVE-2026-48132 The Security Gateway does not correctly validate a length value in certain IKE packets when NAT-T is used (4500/UDP). As a result, a specially crafted or malformed packet can cause the VPN processing service to terminate unexpectedly, leading to deni… High Network Exploitable Tue, 26 May 2026 12:56:47 GMT https://vulnogram.org/CVE-2026-48131 https://vulnogram.org/CVE-2026-48131 The VPN service may mishandle an unexpected IKE fragment value received on the IKE port 500/UDP during the early stage of a connection attempt. This can cause the service to terminate unexpectedly, resulting in denial of service (temporary disruption… High Network Exploitable Tue, 26 May 2026 12:56:08 GMT https://vulnogram.org/CVE-2026-3502 https://vulnogram.org/CVE-2026-3502 TrueConf Client downloads application update code and applies it without performing verification. An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the u… High Known Exploited Mon, 30 Mar 2026 18:05:42 GMT https://vulnogram.org/CVE-2025-9142 https://vulnogram.org/CVE-2025-9142 A local user can trigger Harmony SASE Windows client to write or delete files outside the intended certificate working directory. High Wed, 14 Jan 2026 14:30:48 GMT https://vulnogram.org/CVE-2025-8305 https://vulnogram.org/CVE-2025-8305 An authenticated local user can obtain information that allows claiming security policy rules of another user due to sensitive information being printed in plaintext in Identity Agent for Terminal Services debug files. Medium Mon, 22 Dec 2025 07:58:06 GMT https://vulnogram.org/CVE-2025-8304 https://vulnogram.org/CVE-2025-8304 An authenticated local user can obtain information that allows claiming security policy rules of another user due to sensitive information being accessible in the Windows Registry keys for Check Point Identity Agent running on a Terminal Server. Medium Mon, 22 Dec 2025 07:57:50 GMT https://vulnogram.org/CVE-2025-3831 https://vulnogram.org/CVE-2025-3831 Log files uploaded during troubleshooting by the Harmony SASE agent may have been accessible to unauthorized parties. High Network Exploitable Tue, 12 Aug 2025 14:48:26 GMT https://vulnogram.org/CVE-2024-52885 https://vulnogram.org/CVE-2024-52885 The Mobile Access Portal's File Share application is vulnerable to a directory traversal attack, allowing an authenticated, malicious end-user (authorized to at least one File Share application) to list the file names of 'nobody'-accessible directori… Medium Wed, 06 Aug 2025 14:45:43 GMT https://vulnogram.org/CVE-2025-2028 https://vulnogram.org/CVE-2025-2028 Lack of TLS validation when downloading a CSV file including mapping from IPs to countries used ONLY for displaying country flags in logs Medium Network Exploitable Wed, 06 Aug 2025 14:44:31 GMT https://vulnogram.org/CVE-2024-24915 https://vulnogram.org/CVE-2024-24915 Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and fetch them. Medium Sun, 29 Jun 2025 12:02:41 GMT https://vulnogram.org/CVE-2024-24916 https://vulnogram.org/CVE-2024-24916 Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileges (admin). Medium Thu, 19 Jun 2025 13:17:39 GMT https://vulnogram.org/CVE-2024-52888 https://vulnogram.org/CVE-2024-52888 For an authenticated end-user the portal may run a script while attempting to display a directory or some file's properties. Medium Sun, 27 Apr 2025 07:46:53 GMT https://vulnogram.org/CVE-2024-52887 https://vulnogram.org/CVE-2024-52887 Authenticated end-user may set a specially crafted SNX bookmark that can make their browser run a script while accessing their own bookmark list. Low Sun, 27 Apr 2025 07:46:23 GMT https://vulnogram.org/CVE-2024-24911 https://vulnogram.org/CVE-2024-24911 In rare scenarios, the cpca process on the Security Management Server / Domain Management Server may exit unexpectedly, creating a core dump file. When the cpca process is down, VPN and SIC connectivity issues may occur if the CRL is not present in t… Medium Network Exploitable Thu, 06 Feb 2025 13:46:11 GMT https://vulnogram.org/CVE-2024-24914 https://vulnogram.org/CVE-2024-24914 Authenticated Gaia users can inject code or commands by global variables through special HTTP requests. A Security fix that mitigates this vulnerability is available. High Thu, 07 Nov 2024 11:25:53 GMT https://vulnogram.org/CVE-2024-24919 https://vulnogram.org/CVE-2024-24919 Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is avai… High Known Exploited Network Exploitable Tue, 28 May 2024 18:22:19 GMT https://vulnogram.org/CVE-2024-24912 https://vulnogram.org/CVE-2024-24912 A local privilege escalation vulnerability has been identified in Harmony Endpoint Security Client for Windows versions E88.10 and below. To exploit this vulnerability, an attacker must first obtain the ability to execute local privileged code on the… Medium Wed, 01 May 2024 13:22:48 GMT https://vulnogram.org/CVE-2024-24910 https://vulnogram.org/CVE-2024-24910 A local attacker can erscalate privileges on affected Check Point ZoneAlarm ExtremeSecurity NextGen, Identity Agent for Windows, and Identity Agent for Windows Terminal Server. To exploit this vulnerability, an attacker must first obtain the ability… High Thu, 18 Apr 2024 17:35:42 GMT https://vulnogram.org/CVE-2023-28134 https://vulnogram.org/CVE-2023-28134 Local attacker can escalate privileges on affected installations of Check Point Harmony Endpoint/ZoneAlarm Extreme Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulner… High Sun, 12 Nov 2023 22:36:19 GMT https://vulnogram.org/CVE-2023-28130 https://vulnogram.org/CVE-2023-28130 Local user may lead to privilege escalation using Gaia Portal hostnames page. High Wed, 26 Jul 2023 10:57:02 GMT https://vulnogram.org/CVE-2023-28133 https://vulnogram.org/CVE-2023-28133 Local privilege escalation in Check Point Endpoint Security Client (version E87.30) via crafted OpenSSL configuration file Sun, 23 Jul 2023 09:07:35 GMT https://vulnogram.org/CVE-2023-28131 https://vulnogram.org/CVE-2023-28131 A vulnerability in the expo.io framework allows an attacker to take over accounts and steal credentials on an application/website that configured the "Expo AuthSession Redirect Proxy" for social sign-in. This can be achieved once a victim clicks a ma… Critical Network Exploitable Mon, 24 Apr 2023 00:00:00 GMT https://vulnogram.org/CVE-2022-23746 https://vulnogram.org/CVE-2022-23746 The IPsec VPN blade has a dedicated portal for downloading and connecting through SSL Network Extender (SNX). If the portal is configured for username/password authentication, it is vulnerable to a brute-force attack on usernames and passwords. High Network Exploitable Wed, 30 Nov 2022 00:00:00 GMT https://vulnogram.org/CVE-2022-23748 https://vulnogram.org/CVE-2022-23748 mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a malicious attacker could be using the valid and legitimate executable t… High Known Exploited Thu, 17 Nov 2022 00:00:00 GMT https://vulnogram.org/CVE-2022-23747 https://vulnogram.org/CVE-2022-23747 In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback. Wed, 17 Aug 2022 20:52:26 GMT https://vulnogram.org/CVE-2022-23745 https://vulnogram.org/CVE-2022-23745 A potential memory corruption issue was found in Capsule Workspace Android app (running on GrapheneOS). This could result in application crashing but could not be used to gather any sensitive information. Mon, 18 Jul 2022 16:09:20 GMT https://vulnogram.org/CVE-2022-23744 https://vulnogram.org/CVE-2022-23744 Check Point Endpoint before version E86.50 failed to protect against specific registry change which allowed to disable endpoint protection by a local administrator. Thu, 07 Jul 2022 15:51:44 GMT https://vulnogram.org/CVE-2022-23742 https://vulnogram.org/CVE-2022-23742 Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low privileges. An attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-089… High Thu, 12 May 2022 19:23:18 GMT https://vulnogram.org/CVE-2021-30361 https://vulnogram.org/CVE-2021-30361 The Check Point Gaia Portal's GUI Clients allowed authenticated administrators with permission for the GUI Clients settings to inject a command that would run on the Gaia OS. Wed, 11 May 2022 16:42:52 GMT https://vulnogram.org/CVE-2022-23743 https://vulnogram.org/CVE-2022-23743 Check Point ZoneAlarm before version 15.8.200.19118 allows a local actor to escalate privileges during the upgrade process. In addition, weak permissions in the ProgramData\CheckPoint\ZoneAlarm\Data\Updates directory allow a local attacker the abilit… Wed, 11 May 2022 00:00:00 GMT https://vulnogram.org/CVE-2021-30360 https://vulnogram.org/CVE-2021-30360 Users have access to the directory where the installation repair occurs. Since the MS Installer allows regular users to run the repair, an attacker can initiate the installation repair and place a specially crafted EXE in the repair folder which runs… Fri, 07 Jan 2022 22:39:56 GMT https://vulnogram.org/CVE-2021-30359 https://vulnogram.org/CVE-2021-30359 The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to execute some steps during the installation. Because the MS Installer allows regular users to repair their installation, an attacker running an installer… Fri, 22 Oct 2021 13:32:54 GMT https://vulnogram.org/CVE-2021-30358 https://vulnogram.org/CVE-2021-30358 Mobile Access Portal Native Applications who's path is defined by the administrator with environment variables may run applications from other locations by the Mobile Access Portal Agent. Tue, 19 Oct 2021 13:32:46 GMT https://vulnogram.org/CVE-2021-30355 https://vulnogram.org/CVE-2021-30355 Amazon Kindle e-reader prior to and including version 5.13.4 improperly manages privileges, allowing the framework user to elevate privileges to root. Wed, 01 Sep 2021 18:04:18 GMT https://vulnogram.org/CVE-2021-30354 https://vulnogram.org/CVE-2021-30354 Amazon Kindle e-reader prior to and including version 5.13.4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function CJBig2Image::expand() and results in a memory corruption that leads to code execution when parsing a craf… Wed, 01 Sep 2021 17:43:38 GMT