en
Check Point Software Technologies Ltd. is a global cybersecurity vendor that develops and delivers technologies for network, cloud, workspace, and digital infrastructure protection. Its mission is to help enterprises, governments, service providers, smaller businesses, and consumers prevent and manage cyber threats across complex environments.
As of 09/19/2026, checkpoint recorded 7 security vulnerabilities in the last 90 days across 5 products, including 7 rated High or above and 1 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Quantum Security Management had the most security vulnerabilities in the checkpoint ecosystem, with 5 vulnerabilities—approximately 71.43% of the provider's total vulnerabilities during this period.
| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-91843Stack overflow in login process to the Security Management and Log Servers | Exploitation statusNot known exploited | FixNot confirmed | Affected productQuantum Security Management | Published09/16/2026 | SeverityCritical |
CVE-2026-85103Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding | Exploitation statusNot known exploited | FixNot confirmed | Affected productQuantum Security Gateway | Published09/09/2026 | SeverityCritical |
CVE-2026-85102Improper Certificate Validation in Quantum Security Gateway | Exploitation statusNot known exploited | FixNot confirmed | Affected productQuantum Security Gateway | Published09/09/2026 | SeverityCritical |
CVE-2026-18574Authentication Bypass in Check Point Security Management Server | Exploitation statusNot known exploited | FixNot confirmed | Affected productSecurity Management Server | Published08/03/2026 | SeverityCritical |
CVE-2026-62145Local Privilege Escalation in Gaia Portal | Exploitation statusNot known exploited | FixNot confirmed | Affected productQuantum Security Gateway | Published07/22/2026 | SeverityHigh |
CVE-2026-62144Management Authentication Bypass and Privilege Escalation | Exploitation statusNot known exploited | FixNot confirmed | Affected productQuantum Security Management | Published07/22/2026 | SeverityCritical |
CVE-2026-16232Authentication Bypass in the SmartConsole Login Process Using an Application Token | Exploitation statusKEV | FixNot confirmed | Affected productQuantum Security Management | Published07/22/2026 | SeverityCritical |
CVE-2026-10847Local Privilege Escalation vulnerability in Check Point Identity Agent Full for Windows OS | Exploitation statusNot known exploited | FixNot confirmed | Affected productIdentity Agent | Published06/11/2026 | SeverityHigh |
CVE-2026-50752Certificate Validation Bypass in VPN Site-to-Site Connections Using IKEv1 | Exploitation statusNot known exploited | FixNot confirmed | Affected productQuantum Security Gateway | Published06/08/2026 | SeverityHigh |
CVE-2026-48136Authenticated Administrator Role-Based Access Control Bypass in Compliance | Exploitation statusNot known exploited | FixNot confirmed | Affected productQuantum Security Management | Published05/26/2026 | SeverityMedium |
CVE-2026-48135HTTP service can incorrectly process malformed HTTP requests | Exploitation statusNot known exploited | FixNot confirmed | Affected productQuantum Security Gateway | Published05/26/2026 | SeverityMedium |
CVE-2026-48134SQL injection issue in UserCheck Portal when DLP Software Blade is active | Exploitation statusNot known exploited | FixNot confirmed | Affected productQuantum Security Gateway | Published05/26/2026 | SeverityMedium |
CVE-2026-48133Identity Awareness Captive Portal - Unauthenticated Local File Inclusion | Exploitation statusNot known exploited | FixNot confirmed | Affected productQuantum Security Gateway | Published05/26/2026 | SeverityHigh |
CVE-2026-48132VPN service may restart unexpectedly when processing IKE traffic over NAT-T 4500/UDP | Exploitation statusNot known exploited | FixNot confirmed | Affected productQuantum Security Gateway | Published05/26/2026 | SeverityHigh |
CVE-2026-48131VPND IKE Fragment Reassembly - Heap Out-of-Bounds Write via Sequence Number Zero | Exploitation statusNot known exploited | FixNot confirmed | Affected productQuantum Security Gateway | Published05/26/2026 | SeverityHigh |
CVE-2025-9142Local privilege escalation in Harmony SASE Windows Agent | Exploitation statusNot known exploited | FixNot confirmed | Affected productHramony SASE | Published01/14/2026 | SeverityHigh |
CVE-2025-8305Information Disclosure in Identity Agent Debug Files | Exploitation statusNot known exploited | FixNot confirmed | Affected productIdentity Awareness | Published12/22/2025 | SeverityMedium |
CVE-2025-8304Information Disclosure in Identity Agent Registry Keys | Exploitation statusNot known exploited | FixNot confirmed | Affected productIdentity Agent | Published12/22/2025 | SeverityMedium |
CVE-2025-3831Exposed SFTP server | Exploitation statusNot known exploited | FixNot confirmed | Affected productCheck Point Harmony SASE | Published08/12/2025 | SeverityHigh |
CVE-2024-52885Path Traversal | Exploitation statusNot known exploited | FixNot confirmed | Affected productCheck Point Mobile Access | Published08/06/2025 | SeverityMedium |
CVE-2025-2028Lack of TLS validation | Exploitation statusNot known exploited | FixNot confirmed | Affected productCheck Point Management Log Server | Published08/06/2025 | SeverityMedium |
CVE-2024-24915SmartConsole Sensitive Credential Exposure via Memory Dump | Exploitation statusNot known exploited | FixNot confirmed | Affected productCheck Point SmartConsole | Published06/29/2025 | SeverityMedium |
CVE-2024-24916DLL-HiJacking | Exploitation statusNot known exploited | FixNot confirmed | Affected productCheck Point SmartConsole | Published06/19/2025 | SeverityMedium |
CVE-2024-52888Stored-XSS | Exploitation statusNot known exploited | FixNot confirmed | Affected productCheck Point Mobile Access | Published04/27/2025 | SeverityMedium |
CVE-2024-52887Self-XSS | Exploitation statusNot known exploited | FixNot confirmed | Affected productCheck Point Mobile Access | Published04/27/2025 | SeverityLow |
CVE-2024-24911Out of Bounds read in the CPCA process on Check Point Management Server | Exploitation statusNot known exploited | FixNot confirmed | Affected productMulti-Domain Security Management, Quantum Security Management | Published02/06/2025 | SeverityMedium |
CVE-2024-6233Check Point ZoneAlarm Extreme Security Link Following Local Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productZoneAlarm Extreme Security | Published11/22/2024 | SeverityHigh |
CVE-2024-24914 | Exploitation statusNot known exploited | FixNot confirmed | Affected productClusterXL, Multi-Domain Security Management, Quantum Appliances, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Security Management | Published11/07/2024 | SeverityHigh |
CVE-2024-24912Local privilege escalation in Harmony Endpoint Security Client for Windows via crafted DLL file | Exploitation statusNot known exploited | FixNot confirmed | Affected productHarmony Endpoint Security Client for Windows | Published05/01/2024 | SeverityMedium |
CVE-2024-24910LocalprivilegeescalationinCheckPointZoneAlarmExtremeSecurityNextGen,IdentityAgentforWindows,andIdentityAgentforWindowsTerminalServerviacraftedDLLfile | Exploitation statusNot known exploited | FixNot confirmed | Affected productZoneAlarmExtremeSecurityNextGen,IdentityAgentforWindows,IdentityAgentforWindowsTerminalServer | Published04/18/2024 | SeverityHigh |
CVE-2023-28134Local Privliege Escalation in Check Point Endpoint Security Remediation Service | Exploitation statusNot known exploited | FixNot confirmed | Affected productHarmony Endpoint. | Published11/12/2023 | SeverityHigh |
CVE-2023-28130 | Exploitation statusPublic exploit | FixNot confirmed | Affected productQuantum Appliances, Quantum Security Gateways | Published07/26/2023 | SeverityHigh |
CVE-2023-28133 | Exploitation statusNot known exploited | FixNot confirmed | Affected productHarmony Endpoint. | Published07/23/2023 | SeverityUnknown |
CVE-2022-23746 | Exploitation statusNot known exploited | FixNot confirmed | Affected productGateway & Management, IPsec VPN blade SNX portal. | Published11/30/2022 | SeverityHigh |
CVE-2022-41604 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published09/27/2022 | SeverityHigh |
CVE-2022-23745 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCheckpoint Harmony Capsule Workspace | Published07/18/2022 | SeverityUnknown |
CVE-2022-23744 | Exploitation statusNot confirmed | FixNot confirmed | Affected productEnterprise Endpoint Security Windows Clients. | Published07/07/2022 | SeverityUnknown |
CVE-2022-23742 | Exploitation statusNot known exploited | FixNot confirmed | Affected productCheck Point Endpoint Security Client for Windows | Published05/12/2022 | SeverityHigh |
CVE-2022-23743 | Exploitation statusNot confirmed | FixNot confirmed | Affected productZoneAlarm. | Published05/11/2022 | SeverityUnknown |
CVE-2021-30360 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCheck Point Remote Access Client | Published01/07/2022 | SeverityUnknown |
CVE-2021-30359 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCheck Point Harmony Browse and SandBlast Agent for Browsers | Published10/22/2021 | SeverityUnknown |
CVE-2021-30358 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCheck Point Mobile Access Portal Agent | Published10/19/2021 | SeverityUnknown |
CVE-2021-30357 | Exploitation statusNot confirmed | FixNot confirmed | Affected productSSL Network Extender Client for Linux | Published06/08/2021 | SeverityUnknown |
CVE-2021-30356 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCheck Point Identity Agent | Published04/22/2021 | SeverityUnknown |
CVE-2020-6024 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCheck Point SmartConsole | Published01/20/2021 | SeverityUnknown |
CVE-2020-6021 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCheck Point Endpoint Security Client for Windows | Published12/03/2020 | SeverityUnknown |
CVE-2020-6015 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCheck Point Endpoint Security for Windows | Published11/05/2020 | SeverityUnknown |
CVE-2020-6014 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCheck Point Endpoint Security Client for Windows | Published10/30/2020 | SeverityUnknown |
CVE-2020-6023 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCheck Point ZoneAlarm | Published10/27/2020 | SeverityUnknown |
CVE-2020-6022 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCheck Point ZoneAlarm | Published10/27/2020 | SeverityUnknown |
CVE-2020-6020 | Exploitation statusNot confirmed | FixNot confirmed | Affected productICA Management Portal | Published09/24/2020 | SeverityUnknown |
CVE-2020-6012 | Exploitation statusNot confirmed | FixNot confirmed | Affected productZoneAlarm Anti-Ransomware | Published08/04/2020 | SeverityUnknown |
CVE-2020-6013 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCheck Point ZoneAlarm | Published07/06/2020 | SeverityUnknown |
CVE-2019-8463 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCheck Point Endpoint Security client for Windows | Published12/23/2019 | SeverityUnknown |
CVE-2019-8461 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCheck Point Endpoint Security Initial Client for Windows | Published08/29/2019 | SeverityUnknown |
CVE-2019-8459 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCheck Point Endpoint Security Client for Windows, VPN blade | Published06/20/2019 | SeverityUnknown |
CVE-2019-8458 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCheck Point Endpoint Security Client for Windows, Anti-Malware blade | Published06/20/2019 | SeverityUnknown |
CVE-2019-8454 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCheck Point Endpoint Security client for Windows | Published04/29/2019 | SeverityUnknown |
CVE-2019-8452 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCheck Point ZoneAlarm | Published04/22/2019 | SeverityUnknown |
CVE-2019-8453 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCheck Point ZoneAlarm | Published04/17/2019 | SeverityUnknown |
CVE-2019-8455 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCheck Point ZoneAlarm | Published04/17/2019 | SeverityUnknown |
CVE-2019-8456 | Exploitation statusNot confirmed | FixNot confirmed | Affected productCheck Point IPsec VPN | Published04/09/2019 | SeverityUnknown |
CVE-2018-8790 | Exploitation statusNot confirmed | FixNot confirmed | Affected productZoneAlarm | Published03/01/2019 | SeverityUnknown |
CVE-2014-8950 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published11/16/2014 | SeverityUnknown |
CVE-2014-8951 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published11/16/2014 | SeverityUnknown |
CVE-2014-8952 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published11/16/2014 | SeverityUnknown |
CVE-2014-7169 | Exploitation statusKEV | FixNot confirmed | Affected productNot confirmed | Published09/25/2014 | SeverityCritical |
CVE-2014-6271 | Exploitation statusKEV | FixNot confirmed | Affected productNot confirmed | Published09/24/2014 | SeverityCritical |
CVE-2013-7350 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/01/2014 | SeverityUnknown |
CVE-2014-1673 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/26/2014 | SeverityUnknown |
CVE-2014-1672 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/26/2014 | SeverityUnknown |
CVE-2013-7311 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/23/2014 | SeverityUnknown |
CVE-2013-7304 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/22/2014 | SeverityUnknown |
CVE-2013-5636 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published11/30/2013 | SeverityUnknown |
CVE-2013-5635 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published11/30/2013 | SeverityUnknown |
CVE-2010-5184 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/25/2012 | SeverityUnknown |
CVE-2012-2753 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published06/19/2012 | SeverityUnknown |
CVE-2011-1827 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published10/05/2011 | SeverityUnknown |
CVE-2011-2664 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/08/2011 | SeverityUnknown |
CVE-2008-7025 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/21/2009 | SeverityUnknown |
CVE-2008-7009 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/19/2009 | SeverityUnknown |
CVE-2009-1227 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published04/02/2009 | SeverityUnknown |
CVE-2008-5994 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/28/2009 | SeverityUnknown |
CVE-2008-5849 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/06/2009 | SeverityUnknown |
CVE-2008-1397 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/20/2008 | SeverityUnknown |
CVE-2008-1208 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/08/2008 | SeverityUnknown |
CVE-2008-0662 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/08/2008 | SeverityUnknown |
CVE-2002-2405 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published11/01/2007 | SeverityUnknown |
CVE-2007-4216 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/21/2007 | SeverityUnknown |
CVE-2005-2932 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/21/2007 | SeverityUnknown |
CVE-2007-3489 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published06/29/2007 | SeverityUnknown |
CVE-2007-2730 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published05/16/2007 | SeverityUnknown |
CVE-2007-2689 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published05/16/2007 | SeverityUnknown |
CVE-2007-2174 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/24/2007 | SeverityUnknown |
CVE-2004-2679 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/27/2007 | SeverityUnknown |
CVE-2007-0471 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/24/2007 | SeverityUnknown |
CVE-2006-3885 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/27/2006 | SeverityUnknown |
CVE-2006-0255 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/18/2006 | SeverityUnknown |
CVE-2005-4093 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/08/2005 | SeverityUnknown |
CVE-2005-3673 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published11/18/2005 | SeverityUnknown |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
