# CVE-2026-62145: Check Point Gaia Portal privilege escalation to root

Source: https://junglewise.ai/threats/cve-2026-62145-check-point-gaia-portal-privilege-escalation-to-root  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-22. Updated: 2026-07-22  
License: CC BY 4.0 with a link back

CVE-2026-62145 · Severity: high · CVSS 7.5 · Published 2026-07-22

A security vulnerability exists in the Gaia Portal, the web-based management interface for Check Point security gateways and management servers. An authorized user who is only supposed to have 'read-only' access can exploit this flaw to gain full administrative (root) control over the system. This could allow an attacker to modify security policies, access sensitive configuration data, or disrupt network operations.

Technologies: [Check Point Quantum Security Management](https://junglewise.ai/threats/technologies/quantum-security-management). Vendors: [Check Point](https://junglewise.ai/threats/vendors/check-point).

## Quick answers

**Is CVE-2026-62145 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-62145 being exploited in the wild.

**How severe is CVE-2026-62145?** High severity, with a CVSS score of 7.5, published 22 July 2026.

**Which products and versions are affected?** Check Point Quantum Security Gateway R82.10 (Jumbo Hotfix Take 36 or below), R82 (Jumbo Hotfix Take 118 or below), R81.20 (Jumbo Hotfix Take 158 or below), R81.10, R81, R80.30, R80.20, R80.10, R80, R77.30; Check Point Quantum Security Management R82.10 (Jumbo Hotfix Take 36 or below), R82 (Jumbo Hotfix Take 118 or below), R81.20 (Jumbo Hotfix Take 158 or below), R81.10, R81, R80.30, R80.20, R80.10, R80, R77.30.

**Is there a fix for CVE-2026-62145?** A patch was published on 2026-07-22: Fixes released in Jumbo Hotfix Accumulators Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-62145 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-62145?** Check whether you run Check Point Quantum Security Gateway or Check Point Quantum Security Management at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

This vulnerability is classified as improper privilege management (CWE-269) within the Gaia Portal web interface. An authenticated attacker with low-level (read-only) Gaia Portal privileges can exploit the system to execute arbitrary commands with root-level authority. The attack vector is network-based, though it requires existing authentication and is characterized by high complexity. The flaw affects multiple versions of Quantum Security Gateway and Security Management software, including legacy versions. Fixes are available in recent Jumbo Hotfix Accumulators for R81.20, R82, and R82.10.

## Affected products

- Check Point Quantum Security Gateway R82.10 (Jumbo Hotfix Take 36 or below), R82 (Jumbo Hotfix Take 118 or below), R81.20 (Jumbo Hotfix Take 158 or below), R81.10, R81, R80.30, R80.20, R80.10, R80, R77.30
- Check Point Quantum Security Management R82.10 (Jumbo Hotfix Take 36 or below), R82 (Jumbo Hotfix Take 118 or below), R81.20 (Jumbo Hotfix Take 158 or below), R81.10, R81, R80.30, R80.20, R80.10, R80, R77.30

## Timeline

- 2026-07-14: other: Article created
- 2026-07-22: advisory: Advisory published by Check Point and NVD
- 2026-07-22: patched: Fixes released in Jumbo Hotfix Accumulators

## References

- [https://support.checkpoint.com/results/sk/sk185153](https://support.checkpoint.com/results/sk/sk185153)

## Related threats

- [Check Point Quantum Security heap buffer overflow in VPN certificate ASN.1 decoding](https://junglewise.ai/threats/cve-2026-85103-check-point-quantum-security-heap-buffer-overflow-in-vpn)
- [Check Point Security Management authentication bypass in Management Server](https://junglewise.ai/threats/cve-2026-62144-check-point-security-management-authentication-bypass-in)
- [Check Point SmartConsole authentication bypass in login process](https://junglewise.ai/threats/cve-2026-16232-check-point-smartconsole-authentication-bypass-in-login-process)