Vendor
Check Point vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 19 vulnerabilities in Check Point: 2 in the last 7 days and 6 in the last 90 days, 7 of them critical and 5 exploited in the wild. The most recent, CVE-2026-123039, was published on 12 November 2026. Nothing in the last four weeks, down from 2 vulnerabilities in the four before. 0 critical against 2, 0 exploited in the wild against 1. 2 technologies have a page of their own.
- Last 7 days
- 2
- Last 90 days
- 6
- Critical, all time
- 7
- Exploited in the wild
- 5
About Check Point
Israeli cybersecurity company specializing in network security, threat prevention, and data protection.
Check Point technologies
Latest Check Point vulnerabilities
- CVE-2026-123039: Gaia OS DynamicCLI privilege escalation via unauthenticated sockethighCVSS 7.8
- CVE-2026-107484: Check Point Gaia Portal privilege escalation in backend handlershighCVSS 7.3
- CVE-2026-93616: Check Point Multiple Products path traversal vulnerabilitycriticalexploited in the wildCVSS 9.8EPSS 19.7%
- CVE-2026-91843: Check Point Security Management and Log Servers stack overflow in logincriticalCVSS 9.8EPSS 0.5%
- CVE-2026-85103: Check Point Quantum Security heap buffer overflow in VPN certificate ASN.1 decodingcriticalCVSS 9.8EPSS 3.6%
- CVE-2026-85102: Check Point Security Gateway and Spark Firewall improper certificate validation in VPNcriticalexploited in the wildCVSS 9.8EPSS 1.0%
- CVE-2026-62145: Check Point Gaia Portal privilege escalation to roothighCVSS 7.5
- CVE-2026-62144: Check Point Security Management authentication bypass in Management Serverinfo
- CVE-2026-16232: Check Point SmartConsole authentication bypass in login processcriticalexploited in the wildCVSS 9.8
- CVE-2026-10847: Check Point Identity Agent privilege escalation in log collectionhighCVSS 7.8
- CVE-2026-50752: Check Point VPN certificate validation bypass in IKEv1highCVSS 7.4
- CVE-2026-50751: Check Point VPN authentication bypass in IKEv1 key exchangecriticalexploited in the wildCVSS 9.8EPSS 0.0%
- CVE-2026-48136: Check Point Multi-Domain Management RBAC bypass in Compliance metadatamediumCVSS 4.1
- CVE-2026-48135: Check Point HTTP service heap overflow in request parsingmediumCVSS 5.3
- CVE-2026-48134: Check Point Security Gateway SQL injection in UserCheck PortalhighCVSS 7.6
- CVE-2026-48133: Check Point Security Gateway LFI in Identity Awareness bladehighCVSS 7.5
- CVE-2026-48132: Check Point Security Gateway denial of service in VPN servicehighCVSS 7.4
- CVE-2026-48131: Check Point VPN heap overflow in VPND IKE fragment reassemblyhighCVSS 8.1
- CVE-2024-24919: Check Point Quantum Security Gateways Information Disclosure Vulnerabilitycriticalexploited in the wildCVSS 8.6
Most severe Check Point vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2026-93616: Check Point Multiple Products path traversal vulnerabilitycriticalexploited in the wildCVSS 9.8EPSS 19.7%
- CVE-2026-85102: Check Point Security Gateway and Spark Firewall improper certificate validation in VPNcriticalexploited in the wildCVSS 9.8EPSS 1.0%
- CVE-2026-50751: Check Point VPN authentication bypass in IKEv1 key exchangecriticalexploited in the wildCVSS 9.8EPSS 0.0%
- CVE-2026-16232: Check Point SmartConsole authentication bypass in login processcriticalexploited in the wildCVSS 9.8
- CVE-2024-24919: Check Point Quantum Security Gateways Information Disclosure Vulnerabilitycriticalexploited in the wildCVSS 8.6
- CVE-2026-85103: Check Point Quantum Security heap buffer overflow in VPN certificate ASN.1 decodingcriticalCVSS 9.8EPSS 3.6%
- CVE-2026-91843: Check Point Security Management and Log Servers stack overflow in logincriticalCVSS 9.8EPSS 0.5%
- CVE-2026-48131: Check Point VPN heap overflow in VPND IKE fragment reassemblyhighCVSS 8.1
- CVE-2026-123039: Gaia OS DynamicCLI privilege escalation via unauthenticated sockethighCVSS 7.8
- CVE-2026-10847: Check Point Identity Agent privilege escalation in log collectionhighCVSS 7.8
Vulnerabilities per week
Nothing in the last four weeks, down from 2 vulnerabilities in the four before. 0 critical against 2, 0 exploited in the wild against 1. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 0 | 0 | |
| 24 Aug 2026 | 0 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 2 | 2 | |
| 14 Sep 2026 | 1 | 1 | |
| 21 Sep 2026 | 1 | 1 | |
| 28 Sep 2026 | 0 | 0 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 0 | 0 | |
| 19 Oct 2026 | 0 | 0 | |
| 26 Oct 2026 | 0 | 0 | |
| 2 Nov 2026 | 0 | 0 | |
| 9 Nov 2026 | 2 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Check Point vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/vendors/check-point)<a href="https://junglewise.ai/threats/vendors/check-point"><img src="https://junglewise.ai/threats/vendors/check-point/badge.svg" alt="Check Point vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/vendors/check-point.json, and this page as text at https://junglewise.ai/threats/vendors/check-point.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Check Point vulnerabilities", https://junglewise.ai/threats/vendors/check-point, 12 November 2026.