Check Point
Vulnerability activity for Check Point: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 2
- Critical (CVSS 9+)
- 2
- Exploited (CISA KEV)
- 2
- With exploit code
- 2
Last 365 days
- CVEs
- 4
- Critical (CVSS 9+)
- 4
- Exploited (CISA KEV)
- 4
- With exploit code
- 4
Exploited now
CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.
- 9.8CriticalSep 22, 2026Check Point Multiple Products Crypto / certificateCVE-2026-85102Check Point Security Gateway and Check Point Spark Firewall using Site to Site VPN or Remote Access VPN contain an improper certificate validation vulnerability which could allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.Added to KEV Sep 22, 2026Exploited54% likelyExploit code
- 9.8CriticalSep 22, 2026Check Point Multiple Products Path traversal / file handlingCVE-2026-93616Check Point Security Management Server, Multi-Domain Security Management Server, Log Server, Multi-Domain Log Server, and SmartEvent contain a path traversal vulnerability that allows an unauthenticated attacker to upload and execute arbitrary scripts.Added to KEV Sep 22, 2026Exploited76% likelyExploit codeNucleiDetection
- 9.3CriticalJul 22, 2026Check Point SmartConsole Auth bypass / access controlCVE-2026-16232Check Point SmartConsole contains an improper authentication vulnerability which could allow an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges.Added to KEV Jul 22, 2026Exploited3.5% likelyExploit codeMetasploit · NucleiDetection
- 9.3CriticalJun 8, 2026Check Point Security Gateway Auth bypass / access controlCVE-2026-50751Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.Added to KEV Jun 8, 2026Exploited85% likelyExploit codeNucleiDetection
- 8.6HighMay 28, 2024Check Point Quantum Security Gateways Information disclosureCVE-2024-24919Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several product lines from Check Point, including CloudGuard Network, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark Appliances.Added to KEV May 30, 2024 · 1 day after publicationExploited100% likelyExploit codeMetasploit · NucleiDetection
Recent
- 9.8CriticalSep 22, 2026Check Point Multiple Products Path traversal / file handlingCVE-2026-93616Check Point Security Management Server, Multi-Domain Security Management Server, Log Server, Multi-Domain Log Server, and SmartEvent contain a path traversal vulnerability that allows an unauthenticated attacker to upload and execute arbitrary scripts.Exploited76% likelyExploit codeNucleiDetection
- 9.8CriticalSep 22, 2026Check Point Multiple Products Crypto / certificateCVE-2026-85102Check Point Security Gateway and Check Point Spark Firewall using Site to Site VPN or Remote Access VPN contain an improper certificate validation vulnerability which could allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.Exploited54% likelyExploit code
- 9.3CriticalJul 22, 2026Check Point SmartConsole Auth bypass / access controlCVE-2026-16232Check Point SmartConsole contains an improper authentication vulnerability which could allow an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges.Exploited3.5% likelyExploit codeMetasploit · NucleiDetection
- 9.3CriticalJun 8, 2026Check Point Security Gateway Auth bypass / access controlCVE-2026-50751Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.Exploited85% likelyExploit codeNucleiDetection
- 8.6HighMay 28, 2024Check Point Quantum Security Gateways Information disclosureCVE-2024-24919Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several product lines from Check Point, including CloudGuard Network, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark Appliances.Exploited100% likelyExploit codeMetasploit · NucleiDetection
Top products
- Multiple Products2 CVEs in the last year, 2 critical, 2 exploited
- SmartConsole1 CVE in the last year, 1 critical, 1 exploited
- Security Gateway1 CVE in the last year, 1 critical, 1 exploited
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.