Checkpoint - vulnerabilities (CVEs)
150 CVEs in 139 products, 0 in the last 30 days, newest from 2026-09-22.
Products
- Firewall-1 - 43 CVEs
- Endpoint Security - 14 CVEs
- Vpn-1 - 14 CVEs
- Zonealarm - 14 CVEs
- Quantum Security Gateway - 10 CVEs
- Quantum Security Management - 9 CVEs
- Security Gateway - 8 CVEs
- Gaia Os - 6 CVEs
- Connectra Ngx - 4 CVEs
- Multi-domain Security Management - 4 CVEs
- Provider-1 - 4 CVEs
- Remote Access Clients - 4 CVEs
- Check Point Mobile Access - 3 CVEs
- Endpoint Security Clients - 3 CVEs
- Mobile Access - 3 CVEs
- Remote Access Vpn - 3 CVEs
- Smartconsole - 3 CVEs
- Zonealarm Extreme Security - 3 CVEs
- Capsule Docs Standalone Client - 2 CVEs
- Check Point Smartconsole - 2 CVEs
- Gaia Embedded - 2 CVEs
- Gaia Portal - 2 CVEs
- Harmony Endpoint - 2 CVEs
- Identity Agent - 2 CVEs
- Next Generation - 2 CVEs
- Quantum Security Gateway Firmware - 2 CVEs
- Spark Firewalls - 2 CVEs
- Ssl Network Extender - 2 CVEs
- Vpn-1 Firewall-1 - 2 CVEs
- Vpn-1 Secureclient - 2 CVEs
- Zonealarm Extreme Security Nextgen - 2 CVEs
- Capsule Docs - 1 CVEs
- Capsule Workspace - 1 CVEs
- Check Point - 1 CVEs
- Check Point Harmony Sase - 1 CVEs
- Check Point Integrity Client - 1 CVEs
- Check Point Management Log Server - 1 CVEs
- Check Point Quantum Gateway - 1 CVEs
- Check Point Vpn - 1 CVEs
- Check Point Vpn-1 Pro - 1 CVEs
- Cloudguard Network - 1 CVEs
- Cloudguard Network Security - 1 CVEs
- Clusterxl - 1 CVEs
- Endpoint Connect - 1 CVEs
- Endpoint Security Mi Server R73 - 1 CVEs
- Endpoint Security Server Package - 1 CVEs
- Endpoint Security Vpn - 1 CVEs
- Express - 1 CVEs
- Firewall-1 Pki Web Service - 1 CVEs
- Harmony Browse - 1 CVEs
- Harmony Endpoint. - 1 CVEs
- Harmony Endpoint Security Client For Windows - 1 CVEs
- Harmony Sase - 1 CVEs
- Hramony Sase - 1 CVEs
- Ica Management Portal - 1 CVEs
- Identity Awareness - 1 CVEs
- Ipsec Vpn - 1 CVEs
- Ipso Os - 1 CVEs
- Jumbo Hotfix For Endpoint Security Server - 1 CVEs
- Log Server - 1 CVEs
- Management Server - 1 CVEs
- Mobile Access Portal Agent - 1 CVEs
- Multi-domain Management - 1 CVEs
- Multi-domain Management/provider-1 - 1 CVEs
- Multi-domain Management Firmware - 1 CVEs
- Multi-domain Security Management Server - 1 CVEs
- Ng-ai - 1 CVEs
- Quantum Appliances - 1 CVEs
- Quantum Maestro - 1 CVEs
- Quantum Scalable Chassis - 1 CVEs
- Quantum Security Gateways - 1 CVEs
- Quantum Security Management Firmware - 1 CVEs
- Quantum Spark Appliances - 1 CVEs
- Quantum Spark Firmware - 1 CVEs
- Sandblast Agent For Browsers - 1 CVEs
- Secureclient Ng - 1 CVEs
- Security Management Server - 1 CVEs
- Session Authentication Agent - 1 CVEs
- Smartconsole For Endpoint Security Server - 1 CVEs
- Spark Gateway And Cloudguard Network - 1 CVEs
- Vpn-1 Firewall-1 Next Generation - 1 CVEs
- Vpn-1 Firewall-1 Vsx - 1 CVEs
- Vpn-1 Power Utm - 1 CVEs
- Vpn-1 Power Utm With Ngx - 1 CVEs
- Vpn-1 Utm Edge - 1 CVEs
- Vpn-1 Utm Edge W Embedded Ngx - 1 CVEs
- Web Intelligence - 1 CVEs
- Zonealarm Anti-ransomware - 1 CVEs
- Zonealarm Pro - 1 CVEs
- Zonealarm Security Suite - 1 CVEs
- Zonealarmextremesecuritynextgenidentityagentforwindowsidentityagentforwindowsterminalserver - 1 CVEs
- Gaia - 0 CVEs
- Quantum 3600 - 0 CVEs
- Quantum 3800 - 0 CVEs
- Quantum 6700 - 0 CVEs
- Quantum Force 19100 - 0 CVEs
- Quantum Force 19200 - 0 CVEs
- Quantum Force 29100 - 0 CVEs
- Quantum Force 29200 - 0 CVEs
- Quantum Force 3920 - 0 CVEs
- Quantum Force 3950 - 0 CVEs
- Quantum Force 3970 - 0 CVEs
- Quantum Force 3980 - 0 CVEs
- Quantum Force 9100 - 0 CVEs
- Quantum Force 9200 - 0 CVEs
- Quantum Force 9300 - 0 CVEs
- Quantum Force 9400 - 0 CVEs
- Quantum Force 9700 - 0 CVEs
- Quantum Force 9800 - 0 CVEs
- Quantum Lightspeed Mls200 - 0 CVEs
- Quantum Lightspeed Mls400 - 0 CVEs
- Quantum Lightspeed Qls250 - 0 CVEs
- Quantum Lightspeed Qls450 - 0 CVEs
- Quantum Lightspeed Qls650 - 0 CVEs
- Quantum Lightspeed Qls800 - 0 CVEs
- Quantum Spark - 0 CVEs
- Quantum Spark 1530 - 0 CVEs
- Quantum Spark 1535 - 0 CVEs
- Quantum Spark 1550 - 0 CVEs
- Quantum Spark 1555 - 0 CVEs
- Quantum Spark 1570 - 0 CVEs
- Quantum Spark 1570r - 0 CVEs
- Quantum Spark 1575 - 0 CVEs
- Quantum Spark 1575r - 0 CVEs
- Quantum Spark 1590 - 0 CVEs
- Quantum Spark 1595 - 0 CVEs
- Quantum Spark 1595r - 0 CVEs
- Quantum Spark 1600 - 0 CVEs
- Quantum Spark 1800 - 0 CVEs
- Quantum Spark 1900 - 0 CVEs
- Quantum Spark 2000 - 0 CVEs
- Quantum Spark 2530 - 0 CVEs
- Quantum Spark 2550 - 0 CVEs
- Quantum Spark 2560 - 0 CVEs
- Quantum Spark 2570 - 0 CVEs
- Quantum Spark 2580 - 0 CVEs
- Quantum Spark 2590 - 0 CVEs
- Secure Platform Ng - 0 CVEs
- Vpn-1 Firewall 1 - 0 CVEs
Newest CVEs of Checkpoint
- CVE-2026-93616 - CVSS 9.8 (critical), 2026-09-22: A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.
- CVE-2026-91843 - CVSS 9.8 (critical), 2026-09-16: A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges.
- CVE-2026-85103 - CVSS 9.8 (critical), 2026-09-09: A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum…
- CVE-2026-85102 - CVSS 9.8 (critical), 2026-09-09: Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute…
- CVE-2026-18574 - CVSS 9.3 (critical), 2026-08-03: An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server (MDS) could allow an…
- CVE-2026-62145 - CVSS 7.5 (high), 2026-07-22: A vulnerability in Check Point Gaia Portal allows an authenticated attacker with read-only Gaia Portal privileges to execute commands with root privileges.
- CVE-2026-62144 - CVSS 9.1 (critical), 2026-07-22: An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to…
- CVE-2026-16232 - CVSS 9.8 (critical), 2026-07-22: An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login…
- CVE-2026-10847 - CVSS 7.8 (high), 2026-06-11: A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS. An authenticated local user may be able to execute…
- CVE-2026-50752 - CVSS 7.4 (high), 2026-06-08: A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an unauthenticated attacker positioned as a man-in-the-middle to…
- CVE-2026-50751 - CVSS 9.3 (critical), 2026-06-08: A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to…
- CVE-2026-48136 - CVSS 4.1 (medium), 2026-05-26: When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain (CMA) can…
- CVE-2026-48135 - CVSS 5.3 (medium), 2026-05-26: A Check Point HTTP-based service can incorrectly handle malformed HTTP requests. The issue is related to HTTP request parsing and validation.
- CVE-2026-48133 - CVSS 7.5 (high), 2026-05-26: When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to read certain internal files on the…
- CVE-2026-48132 - CVSS 8.1 (high), 2026-05-26: The Security Gateway does not correctly validate a length value in certain IKE packets when NAT-T is used (4500/UDP). As a result, a specially crafted or…
- CVE-2026-48131 - CVSS 8.1 (high), 2026-05-26: The VPN service may mishandle an unexpected IKE fragment value received on the IKE port 500/UDP during the early stage of a connection attempt. This can cause…
- CVE-2026-48134 - CVSS 5.6 (medium), 2026-05-26: When the DLP is active, the UserCheck Web Portal contains an input-handling issue in the UserChoice flow. Under specific conditions, an attacker who can…
- CVE-2025-9142 - CVSS 7.5 (high), 2026-01-14: A local user can trigger Harmony SASE Windows client to write or delete files outside the intended certificate working directory.
- CVE-2025-8305 - CVSS 6.5 (medium), 2025-12-22: An authenticated local user can obtain information that allows claiming security policy rules of another user due to sensitive information being printed in…
- CVE-2025-8304 - CVSS 6.5 (medium), 2025-12-22: An authenticated local user can obtain information that allows claiming security policy rules of another user due to sensitive information being accessible in…
- CVE-2025-3831 - CVSS 9.8 (critical), 2025-08-12: Log files uploaded during troubleshooting by the Harmony SASE agent may have been accessible to unauthorized parties.
- CVE-2025-2028 - CVSS 6.5 (medium), 2025-08-06: Lack of TLS validation when downloading a CSV file including mapping from IPs to countries used ONLY for displaying country flags in logs
- CVE-2024-52885 - CVSS 5.4 (medium), 2025-08-06: The Mobile Access Portal's File Share application is vulnerable to a directory traversal attack, allowing an authenticated, malicious end-user (authorized to…
- CVE-2024-24915 - CVSS 7.2 (high), 2025-06-29: Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and fetch them.
- CVE-2024-24916 - CVSS 7.8 (high), 2025-06-19: Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileges (admin).
- CVE-2024-52887 - CVSS 5.4 (medium), 2025-04-27: Authenticated end-user may set a specially crafted SNX bookmark that can make their browser run a script while accessing their own bookmark list.
- CVE-2024-52888 - CVSS 5.4 (medium), 2025-04-27: For an authenticated end-user the portal may run a script while attempting to display a directory or some file's properties.
- CVE-2024-24911 - CVSS 7.5 (high), 2025-02-06: In rare scenarios, the cpca process on the Security Management Server / Domain Management Server may exit unexpectedly, creating a core dump file. When the…
- CVE-2024-6233 - CVSS 7.8 (high), 2024-11-22: Check Point ZoneAlarm Extreme Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate…
- CVE-2024-24914 - CVSS 8 (high), 2024-11-07: Authenticated Gaia users can inject code or commands by global variables through special HTTP requests. A Security fix that mitigates this vulnerability is…
