# Check Point vulnerabilities Source: https://junglewise.ai/threats/vendors/check-point Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 15:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/check-point.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 19 vulnerabilities in Check Point: 2 in the last 7 days and 6 in the last 90 days, 7 of them critical and 5 exploited in the wild. The most recent, CVE-2026-123039, was published on 12 November 2026. Nothing in the last four weeks, down from 2 vulnerabilities in the four before. 0 critical against 2, 0 exploited in the wild against 1. 2 technologies have a page of their own. ## Counts - Last 7 days: 2 - Last 30 days: 2 - Last 90 days: 6 - All time: 19 (7 critical, 5 exploited in the wild) ## About Check Point Israeli cybersecurity company specializing in network security, threat prevention, and data protection. ## Latest Check Point vulnerabilities - [CVE-2026-123039: Gaia OS DynamicCLI privilege escalation via unauthenticated socket](https://junglewise.ai/threats/cve-2026-123039-the-gaia-os-dynamiccli-daemon-runs-as-root-and-listens-on-a) (high, CVSS 7.8, published 12 Nov 2026) - [CVE-2026-107484: Check Point Gaia Portal privilege escalation in backend handlers](https://junglewise.ai/threats/cve-2026-107484-an-input-and-authorization-validation-vulnerability-in-gaia) (high, CVSS 7.3, published 12 Nov 2026) - [CVE-2026-93616: Check Point Multiple Products path traversal vulnerability](https://junglewise.ai/threats/cve-2026-93616-check-point-multiple-products-path-traversal-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 22 Sep 2026) - [CVE-2026-91843: Check Point Security Management and Log Servers stack overflow in login](https://junglewise.ai/threats/cve-2026-91843-check-point-security-management-and-log-servers-stack-overflow-in) (critical, CVSS 9.8, published 16 Sep 2026) - [CVE-2026-85103: Check Point Quantum Security heap buffer overflow in VPN certificate ASN.1 decoding](https://junglewise.ai/threats/cve-2026-85103-check-point-quantum-security-heap-buffer-overflow-in-vpn) (critical, CVSS 9.8, published 9 Sep 2026) - [CVE-2026-85102: Check Point Security Gateway and Spark Firewall improper certificate validation in VPN](https://junglewise.ai/threats/cve-2026-85102-check-point-security-gateway-and-spark-firewall-improper) (critical, exploited in the wild, CVSS 9.8, published 9 Sep 2026) - [CVE-2026-62145: Check Point Gaia Portal privilege escalation to root](https://junglewise.ai/threats/cve-2026-62145-check-point-gaia-portal-privilege-escalation-to-root) (high, CVSS 7.5, published 22 Jul 2026) - [CVE-2026-62144: Check Point Security Management authentication bypass in Management Server](https://junglewise.ai/threats/cve-2026-62144-check-point-security-management-authentication-bypass-in) (info, published 22 Jul 2026) - [CVE-2026-16232: Check Point SmartConsole authentication bypass in login process](https://junglewise.ai/threats/cve-2026-16232-check-point-smartconsole-authentication-bypass-in-login-process) (critical, exploited in the wild, CVSS 9.8, published 22 Jul 2026) - [CVE-2026-10847: Check Point Identity Agent privilege escalation in log collection](https://junglewise.ai/threats/cve-2026-10847-check-point-identity-agent-privilege-escalation-in-log-collection) (high, CVSS 7.8, published 11 Jun 2026) - [CVE-2026-50752: Check Point VPN certificate validation bypass in IKEv1](https://junglewise.ai/threats/cve-2026-50752-check-point-vpn-certificate-validation-bypass-in-ikev1) (high, CVSS 7.4, published 8 Jun 2026) - [CVE-2026-50751: Check Point VPN authentication bypass in IKEv1 key exchange](https://junglewise.ai/threats/cve-2026-50751-check-point-vpn-authentication-bypass-in-ikev1-key-exchange) (critical, exploited in the wild, CVSS 9.8, published 8 Jun 2026) - [CVE-2026-48136: Check Point Multi-Domain Management RBAC bypass in Compliance metadata](https://junglewise.ai/threats/cve-2026-48136-check-point-multi-domain-management-rbac-bypass-in-compliance) (medium, CVSS 4.1, published 26 May 2026) - [CVE-2026-48135: Check Point HTTP service heap overflow in request parsing](https://junglewise.ai/threats/cve-2026-48135-check-point-http-service-heap-overflow-in-request-parsing) (medium, CVSS 5.3, published 26 May 2026) - [CVE-2026-48134: Check Point Security Gateway SQL injection in UserCheck Portal](https://junglewise.ai/threats/cve-2026-48134-check-point-security-gateway-sql-injection-in-usercheck-portal) (high, CVSS 7.6, published 26 May 2026) - [CVE-2026-48133: Check Point Security Gateway LFI in Identity Awareness blade](https://junglewise.ai/threats/cve-2026-48133-check-point-security-gateway-lfi-in-identity-awareness-blade) (high, CVSS 7.5, published 26 May 2026) - [CVE-2026-48132: Check Point Security Gateway denial of service in VPN service](https://junglewise.ai/threats/cve-2026-48132-check-point-security-gateway-denial-of-service-in-vpn-service) (high, CVSS 7.4, published 26 May 2026) - [CVE-2026-48131: Check Point VPN heap overflow in VPND IKE fragment reassembly](https://junglewise.ai/threats/cve-2026-48131-check-point-vpn-heap-overflow-in-vpnd-ike-fragment-reassembly) (high, CVSS 8.1, published 26 May 2026) - [CVE-2024-24919: Check Point Quantum Security Gateways Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2024-24919-check-point-quantum-security-gateways-information-disclosure) (critical, exploited in the wild, CVSS 8.6, published 30 May 2024) ## Most severe Check Point vulnerabilities - [CVE-2026-93616: Check Point Multiple Products path traversal vulnerability](https://junglewise.ai/threats/cve-2026-93616-check-point-multiple-products-path-traversal-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 22 Sep 2026) - [CVE-2026-85102: Check Point Security Gateway and Spark Firewall improper certificate validation in VPN](https://junglewise.ai/threats/cve-2026-85102-check-point-security-gateway-and-spark-firewall-improper) (critical, exploited in the wild, CVSS 9.8, published 9 Sep 2026) - [CVE-2026-50751: Check Point VPN authentication bypass in IKEv1 key exchange](https://junglewise.ai/threats/cve-2026-50751-check-point-vpn-authentication-bypass-in-ikev1-key-exchange) (critical, exploited in the wild, CVSS 9.8, published 8 Jun 2026) - [CVE-2026-16232: Check Point SmartConsole authentication bypass in login process](https://junglewise.ai/threats/cve-2026-16232-check-point-smartconsole-authentication-bypass-in-login-process) (critical, exploited in the wild, CVSS 9.8, published 22 Jul 2026) - [CVE-2024-24919: Check Point Quantum Security Gateways Information Disclosure Vulnerability](https://junglewise.ai/threats/cve-2024-24919-check-point-quantum-security-gateways-information-disclosure) (critical, exploited in the wild, CVSS 8.6, published 30 May 2024) - [CVE-2026-85103: Check Point Quantum Security heap buffer overflow in VPN certificate ASN.1 decoding](https://junglewise.ai/threats/cve-2026-85103-check-point-quantum-security-heap-buffer-overflow-in-vpn) (critical, CVSS 9.8, published 9 Sep 2026) - [CVE-2026-91843: Check Point Security Management and Log Servers stack overflow in login](https://junglewise.ai/threats/cve-2026-91843-check-point-security-management-and-log-servers-stack-overflow-in) (critical, CVSS 9.8, published 16 Sep 2026) - [CVE-2026-48131: Check Point VPN heap overflow in VPND IKE fragment reassembly](https://junglewise.ai/threats/cve-2026-48131-check-point-vpn-heap-overflow-in-vpnd-ike-fragment-reassembly) (high, CVSS 8.1, published 26 May 2026) - [CVE-2026-123039: Gaia OS DynamicCLI privilege escalation via unauthenticated socket](https://junglewise.ai/threats/cve-2026-123039-the-gaia-os-dynamiccli-daemon-runs-as-root-and-listens-on-a) (high, CVSS 7.8, published 12 Nov 2026) - [CVE-2026-10847: Check Point Identity Agent privilege escalation in log collection](https://junglewise.ai/threats/cve-2026-10847-check-point-identity-agent-privilege-escalation-in-log-collection) (high, CVSS 7.8, published 11 Jun 2026) ## Vulnerabilities per week Nothing in the last four weeks, down from 2 vulnerabilities in the four before. 0 critical against 2, 0 exploited in the wild against 1. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 2 | 2 | 1 | | 14 Sep 2026 | 1 | 1 | 0 | | 21 Sep 2026 | 1 | 1 | 1 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 2 | 0 | 0 | ## Check Point technologies - [Check Point Quantum Security Management](https://junglewise.ai/threats/technologies/quantum-security-management): 4 vulnerabilities - [Check Point Security Gateway](https://junglewise.ai/threats/technologies/security-gateway): 4 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Check Point vulnerabilities", https://junglewise.ai/threats/vendors/check-point, 12 November 2026.