Skip to content
OpenAdvisories

Vendor

Check Point

42 known vulnerabilities.

Products

Quantum Security Gateway 12 Quantum Security Management 9 Check Point Mobile Access 3 Identity Agent 2 Multi-Domain Security Management 2 Spark Firewalls 2 Check Point Endpoint Security client for Windows 2 Check Point SmartConsole 2 Check Point Management Log Server 1 Harmony Endpoint. 1 Multi-Domain Security Management, Quantum Security Management 1 Scalable Platforms (ElasticXL, Maestro, Chassis) 1 Check Point Harmony SASE 1 Check Point Endpoint Security Client for Windows, VPN blade 1 ClusterXL, Multi-Domain Security Management, Quantum Appliances, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Security Management 1 Check Point IPsec VPN 1 Hramony SASE 1 ZoneAlarm Extreme Security 1 Check Point Endpoint Security Client for Windows, Anti-Malware blade 1 Check Point Quantum Gateway, Spark Gateway and CloudGuard Network 1 Harmony Endpoint Security Client for Windows 1 ZoneAlarmExtremeSecurityNextGen,IdentityAgentforWindows,IdentityAgentforWindowsTerminalServer 1 Security Management Server 1 Multi-Domain Security Management Server 1 Identity Awareness 1 Security Gateway 0 check_point_quantum_gateway_and_spark_gateway_and_cloudguard_network 0 cloudguard_network_security_firmware 0 quantum_maestro_firmware 0 quantum_scalable_chassis_firmware 0 quantum_security_gateway_firmware 0 quantum_spark_gateway_firmware 0 Multiple Products 0 Quantum Security Gateway, Quantum Security Management 0 Quantum Security Management, Multi-Domain Security Management 0 Mobile Access 0 Remote Access VPN 0 Spark Firewall 0 Endpoint Security < e87.10 0 SmartConsole 0
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-93616 Exploited Public exploit Scanner template EPSS 92%

    Directory Traversal and File upload allows execution of arbitrary script on the Management Server

    A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.

    Check Point Quantum Security Management Network devices
    KEV Sep 22, 2026
  • Critical 9.8
    CVE-2026-85103 Exploited

    Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding

    A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.

    Check Point Quantum Security Gateway Quantum Security Management Network devices
  • Critical 9.8
    CVE-2026-85102 Exploited Public exploit EPSS 54%

    Improper Certificate Validation in Quantum Security Gateway

    Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.

    Check Point Quantum Security Gateway Network devices
    KEV Sep 22, 2026
  • Critical 9.3
    CVE-2026-16232 Exploited Public exploit Scanner template

    Authentication Bypass in the SmartConsole Login Process Using an Application Token

    An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows …

    Check Point Quantum Security Management Multi-Domain Security Management Network devices
    KEV Jul 22, 2026
  • Critical 9.3
    CVE-2026-50751 Exploited · Ransomware Public exploit Scanner template EPSS 85%

    User Authentication Bypass in VPN Remote Access and Mobile Access

    A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.

    Check Point Quantum Security Gateway Spark Firewalls Network devices
    KEV Jun 8, 2026