{"schema_version":1,"title":"Check Point vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 16 vulnerabilities in Check Point: 1 in the last 7 days and 7 in the last 90 days, 6 of them critical and 4 exploited in the wild. The most recent, CVE-2026-93616, was published on 22 September 2026. 2 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/check-point","json_url":"https://junglewise.ai/threats/vendors/check-point.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/check-point","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":7,"all_time":16,"critical":6,"exploited":4,"last_7_days":1,"last_30_days":4,"last_90_days":7,"last_365_days":16},"latest":[{"cve":"CVE-2026-93616","cvss":9.8,"epss":0.1965,"slug":"cve-2026-93616-check-point-multiple-products-path-traversal-vulnerability","title":"A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Poin","severity":"critical","exploited":true,"published_at":"2026-09-22T13:17:11.963+00:00","url":"https://junglewise.ai/threats/cve-2026-93616-check-point-multiple-products-path-traversal-vulnerability"},{"cve":"CVE-2026-91843","cvss":9.8,"epss":0.0052,"slug":"cve-2026-91843-check-point-security-management-and-log-servers-stack-overflow-in","title":"Check Point Security Management and Log Servers stack overflow in login","severity":"critical","exploited":false,"published_at":"2026-09-16T14:17:13.947+00:00","url":"https://junglewise.ai/threats/cve-2026-91843-check-point-security-management-and-log-servers-stack-overflow-in"},{"cve":"CVE-2026-85103","cvss":9.8,"epss":0.0365,"slug":"cve-2026-85103-check-point-quantum-security-heap-buffer-overflow-in-vpn","title":"Check Point Quantum Security heap buffer overflow in VPN certificate ASN.1 decoding","severity":"critical","exploited":false,"published_at":"2026-09-09T13:20:43.997+00:00","url":"https://junglewise.ai/threats/cve-2026-85103-check-point-quantum-security-heap-buffer-overflow-in-vpn"},{"cve":"CVE-2026-85102","cvss":9.8,"epss":0.0099,"slug":"cve-2026-85102-check-point-security-gateway-and-spark-firewall-improper","title":"Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote att","severity":"critical","exploited":true,"published_at":"2026-09-09T13:20:43.793+00:00","url":"https://junglewise.ai/threats/cve-2026-85102-check-point-security-gateway-and-spark-firewall-improper"},{"cve":"CVE-2026-62145","cvss":7.5,"slug":"cve-2026-62145-check-point-gaia-portal-privilege-escalation-to-root","title":"Check Point Gaia Portal privilege escalation to root","severity":"high","exploited":false,"published_at":"2026-07-22T14:17:22.92+00:00","url":"https://junglewise.ai/threats/cve-2026-62145-check-point-gaia-portal-privilege-escalation-to-root"},{"cve":"CVE-2026-62144","slug":"cve-2026-62144-check-point-security-management-authentication-bypass-in","title":"Check Point Security Management authentication bypass in Management Server","severity":"info","exploited":false,"published_at":"2026-07-22T14:17:22.807+00:00","url":"https://junglewise.ai/threats/cve-2026-62144-check-point-security-management-authentication-bypass-in"},{"cve":"CVE-2026-16232","cvss":9.8,"slug":"cve-2026-16232-check-point-smartconsole-authentication-bypass-in-login-process","title":"Check Point SmartConsole authentication bypass in login process","severity":"critical","exploited":true,"published_at":"2026-07-22T14:17:15.513+00:00","url":"https://junglewise.ai/threats/cve-2026-16232-check-point-smartconsole-authentication-bypass-in-login-process"},{"cve":"CVE-2026-10847","cvss":7.8,"slug":"cve-2026-10847-check-point-identity-agent-privilege-escalation-in-log-collection","title":"Check Point Identity Agent privilege escalation in log collection","severity":"high","exploited":false,"published_at":"2026-06-11T14:16:26.06+00:00","url":"https://junglewise.ai/threats/cve-2026-10847-check-point-identity-agent-privilege-escalation-in-log-collection"},{"cve":"CVE-2026-50752","cvss":7.4,"slug":"cve-2026-50752-check-point-vpn-certificate-validation-bypass-in-ikev1","title":"Check Point VPN certificate validation bypass in IKEv1","severity":"high","exploited":false,"published_at":"2026-06-08T12:16:32.503+00:00","url":"https://junglewise.ai/threats/cve-2026-50752-check-point-vpn-certificate-validation-bypass-in-ikev1"},{"cve":"CVE-2026-50751","cvss":9.8,"epss":0.0001,"slug":"cve-2026-50751-check-point-vpn-authentication-bypass-in-ikev1-key-exchange","title":"Check Point VPN authentication bypass in IKEv1 key exchange","severity":"critical","exploited":true,"published_at":"2026-06-08T12:16:32.367+00:00","url":"https://junglewise.ai/threats/cve-2026-50751-check-point-vpn-authentication-bypass-in-ikev1-key-exchange"},{"cve":"CVE-2026-48136","cvss":4.1,"slug":"cve-2026-48136-check-point-multi-domain-management-rbac-bypass-in-compliance","title":"Check Point Multi-Domain Management RBAC bypass in Compliance metadata","severity":"medium","exploited":false,"published_at":"2026-05-26T14:16:39.13+00:00","url":"https://junglewise.ai/threats/cve-2026-48136-check-point-multi-domain-management-rbac-bypass-in-compliance"},{"cve":"CVE-2026-48135","cvss":5.3,"slug":"cve-2026-48135-check-point-http-service-heap-overflow-in-request-parsing","title":"Check Point HTTP service heap overflow in request parsing","severity":"medium","exploited":false,"published_at":"2026-05-26T14:16:39.007+00:00","url":"https://junglewise.ai/threats/cve-2026-48135-check-point-http-service-heap-overflow-in-request-parsing"},{"cve":"CVE-2026-48134","cvss":7.6,"slug":"cve-2026-48134-check-point-security-gateway-sql-injection-in-usercheck-portal","title":"Check Point Security Gateway SQL injection in UserCheck Portal","severity":"high","exploited":false,"published_at":"2026-05-26T14:16:38.87+00:00","url":"https://junglewise.ai/threats/cve-2026-48134-check-point-security-gateway-sql-injection-in-usercheck-portal"},{"cve":"CVE-2026-48133","cvss":7.5,"slug":"cve-2026-48133-check-point-security-gateway-lfi-in-identity-awareness-blade","title":"Check Point Security Gateway LFI in Identity Awareness blade","severity":"high","exploited":false,"published_at":"2026-05-26T14:16:38.73+00:00","url":"https://junglewise.ai/threats/cve-2026-48133-check-point-security-gateway-lfi-in-identity-awareness-blade"},{"cve":"CVE-2026-48132","cvss":7.4,"slug":"cve-2026-48132-check-point-security-gateway-denial-of-service-in-vpn-service","title":"Check Point Security Gateway denial of service in VPN service","severity":"high","exploited":false,"published_at":"2026-05-26T14:16:38.587+00:00","url":"https://junglewise.ai/threats/cve-2026-48132-check-point-security-gateway-denial-of-service-in-vpn-service"},{"cve":"CVE-2026-48131","cvss":8.1,"slug":"cve-2026-48131-check-point-vpn-heap-overflow-in-vpnd-ike-fragment-reassembly","title":"Check Point VPN heap overflow in VPND IKE fragment reassembly","severity":"high","exploited":false,"published_at":"2026-05-26T14:16:38.407+00:00","url":"https://junglewise.ai/threats/cve-2026-48131-check-point-vpn-heap-overflow-in-vpnd-ike-fragment-reassembly"}],"vendor":{"hub":true,"name":"Check Point","slug":"check-point","homepage":"https://www.checkpoint.com/","description":"A global provider of cybersecurity solutions for corporate enterprises and governments.","url":"https://junglewise.ai/threats/vendors/check-point"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":1,"exploited":1,"vulnerabilities":3},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":2,"exploited":1,"vulnerabilities":2},{"week":"2026-09-14","critical":1,"exploited":0,"vulnerabilities":1},{"week":"2026-09-21","critical":1,"exploited":1,"vulnerabilities":1}],"most_severe":[{"cve":"CVE-2026-93616","cvss":9.8,"epss":0.1965,"slug":"cve-2026-93616-check-point-multiple-products-path-traversal-vulnerability","title":"A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Poin","severity":"critical","exploited":true,"published_at":"2026-09-22T13:17:11.963+00:00","url":"https://junglewise.ai/threats/cve-2026-93616-check-point-multiple-products-path-traversal-vulnerability"},{"cve":"CVE-2026-85102","cvss":9.8,"epss":0.0099,"slug":"cve-2026-85102-check-point-security-gateway-and-spark-firewall-improper","title":"Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote att","severity":"critical","exploited":true,"published_at":"2026-09-09T13:20:43.793+00:00","url":"https://junglewise.ai/threats/cve-2026-85102-check-point-security-gateway-and-spark-firewall-improper"},{"cve":"CVE-2026-50751","cvss":9.8,"epss":0.0001,"slug":"cve-2026-50751-check-point-vpn-authentication-bypass-in-ikev1-key-exchange","title":"Check Point VPN authentication bypass in IKEv1 key exchange","severity":"critical","exploited":true,"published_at":"2026-06-08T12:16:32.367+00:00","url":"https://junglewise.ai/threats/cve-2026-50751-check-point-vpn-authentication-bypass-in-ikev1-key-exchange"},{"cve":"CVE-2026-16232","cvss":9.8,"slug":"cve-2026-16232-check-point-smartconsole-authentication-bypass-in-login-process","title":"Check Point SmartConsole authentication bypass in login process","severity":"critical","exploited":true,"published_at":"2026-07-22T14:17:15.513+00:00","url":"https://junglewise.ai/threats/cve-2026-16232-check-point-smartconsole-authentication-bypass-in-login-process"},{"cve":"CVE-2026-85103","cvss":9.8,"epss":0.0365,"slug":"cve-2026-85103-check-point-quantum-security-heap-buffer-overflow-in-vpn","title":"Check Point Quantum Security heap buffer overflow in VPN certificate ASN.1 decoding","severity":"critical","exploited":false,"published_at":"2026-09-09T13:20:43.997+00:00","url":"https://junglewise.ai/threats/cve-2026-85103-check-point-quantum-security-heap-buffer-overflow-in-vpn"},{"cve":"CVE-2026-91843","cvss":9.8,"epss":0.0052,"slug":"cve-2026-91843-check-point-security-management-and-log-servers-stack-overflow-in","title":"Check Point Security Management and Log Servers stack overflow in login","severity":"critical","exploited":false,"published_at":"2026-09-16T14:17:13.947+00:00","url":"https://junglewise.ai/threats/cve-2026-91843-check-point-security-management-and-log-servers-stack-overflow-in"},{"cve":"CVE-2026-48131","cvss":8.1,"slug":"cve-2026-48131-check-point-vpn-heap-overflow-in-vpnd-ike-fragment-reassembly","title":"Check Point VPN heap overflow in VPND IKE fragment reassembly","severity":"high","exploited":false,"published_at":"2026-05-26T14:16:38.407+00:00","url":"https://junglewise.ai/threats/cve-2026-48131-check-point-vpn-heap-overflow-in-vpnd-ike-fragment-reassembly"},{"cve":"CVE-2026-10847","cvss":7.8,"slug":"cve-2026-10847-check-point-identity-agent-privilege-escalation-in-log-collection","title":"Check Point Identity Agent privilege escalation in log collection","severity":"high","exploited":false,"published_at":"2026-06-11T14:16:26.06+00:00","url":"https://junglewise.ai/threats/cve-2026-10847-check-point-identity-agent-privilege-escalation-in-log-collection"},{"cve":"CVE-2026-48134","cvss":7.6,"slug":"cve-2026-48134-check-point-security-gateway-sql-injection-in-usercheck-portal","title":"Check Point Security Gateway SQL injection in UserCheck Portal","severity":"high","exploited":false,"published_at":"2026-05-26T14:16:38.87+00:00","url":"https://junglewise.ai/threats/cve-2026-48134-check-point-security-gateway-sql-injection-in-usercheck-portal"},{"cve":"CVE-2026-62145","cvss":7.5,"slug":"cve-2026-62145-check-point-gaia-portal-privilege-escalation-to-root","title":"Check Point Gaia Portal privilege escalation to root","severity":"high","exploited":false,"published_at":"2026-07-22T14:17:22.92+00:00","url":"https://junglewise.ai/threats/cve-2026-62145-check-point-gaia-portal-privilege-escalation-to-root"}],"generated_at":"2026-09-26T09:11:00.170868+00:00","technologies":[{"name":"Check Point Quantum Security Management","slug":"quantum-security-management","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/quantum-security-management"},{"name":"Check Point Security Gateway","slug":"security-gateway","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/security-gateway"}]}