Checkpoint vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-91843 A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges.Critical 9.8 · Sep 16, 2026
• CVE-2026-85103 A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum SecCritical 9.8 · Sep 9, 2026
• CVE-2026-18574 An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server (MDS) could allow an unauthenticateCritical 9.3 · Aug 3, 2026
• CVE-2026-62145 A vulnerability in Check Point Gaia Portal allows an authenticated attacker with read-only Gaia Portal privileges to execute commands with root privileges.High 7.5 · Jul 22, 2026
• CVE-2026-62144 An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execCritical 9.1 · Jul 22, 2026
• CVE-2026-10847 A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS.High 7.8 · Jun 11, 2026
• CVE-2026-50752 A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an unauthenticated attacker positioned as a man-in-the-middle to bHigh 7.4 · Jun 8, 2026
• CVE-2026-48133 When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to read certain internal files on the SecuriHigh 7.5 · May 26, 2026
• CVE-2026-48132 The Security Gateway does not correctly validate a length value in certain IKE packets when NAT-T is used (4500/UDP).High 8.1 · May 26, 2026
• CVE-2026-48131 The VPN service may mishandle an unexpected IKE fragment value received on the IKE port 500/UDP during the early stage of a connection attempt.High 8.1 · May 26, 2026
• CVE-2025-9142 A local user can trigger Harmony SASE Windows client to write or delete files outside the intended certificate working directory.High 7.5 · Jan 14, 2026
• CVE-2025-3831 Log files uploaded during troubleshooting by the Harmony SASE agent may have been accessible to unauthorized parties.High 8.1 · Aug 12, 2025
• CVE-2024-24914 Authenticated Gaia users can inject code or commands by global variables through special HTTP requests.High 8 · Nov 7, 2024
• CVE-2024-24910 A local attacker can erscalate privileges on affected Check Point ZoneAlarm ExtremeSecurity NextGen, Identity Agent for Windows, and Identity Agent for Windows High 7.3 · Apr 18, 2024
• CVE-2023-28134 Local attacker can escalate privileges on affected installations of Check Point Harmony Endpoint/ZoneAlarm Extreme Security.High 7.8 · Nov 12, 2023
• CVE-2023-28130 Local user may lead to privilege escalation using Gaia Portal hostnames page.High 7.2 · Jul 26, 2023
• CVE-2023-28133 Local privilege escalation in Check Point Endpoint Security Client (version E87.30) via crafted OpenSSL configuration fileHigh 7.8 · Jul 23, 2023
• CVE-2022-23746 The IPsec VPN blade has a dedicated portal for downloading and connecting through SSL Network Extender (SNX).High 7.5 · Nov 30, 2022
• CVE-2022-41604 Check Point ZoneAlarm Extreme Security before 15.8.211.19229 allows local users to escalate privileges.High 8.8 · Sep 27, 2022
• CVE-2022-23745 A potential memory corruption issue was found in Capsule Workspace Android app (running on GrapheneOS).High 7.5 · Jul 18, 2022
• CVE-2022-23742 Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low privileges.High 7.8 · May 12, 2022
• CVE-2022-23743 Check Point ZoneAlarm before version 15.8.200.19118 allows a local actor to escalate privileges during the upgrade process.High 7.8 · May 11, 2022
• CVE-2021-30360 Users have access to the directory where the installation repair occurs.High 7.8 · Jan 10, 2022
• CVE-2021-30359 The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to execute some steps during the installation.High 7.8 · Oct 22, 2021
• CVE-2021-30358 Mobile Access Portal Native Applications who's path is defined by the administrator with environment variables may run applications from other locations by the High 7.2 · Oct 19, 2021