VulnerabilityBSI CERT-Bund
Check Point Security Management und Security Gateway: Mehrere Schwachstellen ermöglichen Erlangen von Administratorrechten
NEOSEC enrichment — no mirror of the original source
Ein Angreifer kann mehrere Schwachstellen in Check Point Security Management und Check Point Security Gateway ausnutzen, um Administratorrechte zu erlangen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Highbsi:WID-SEC-2026-45622 linked CVEs
Open advisory with all CVEs
More on Management
Other advisories
- HighCVE-2026-129180Projectworlds Pvt. Visitor Management System: SQL-Injection
- HighCVE-2026-129180Projectworlds Pvt. Visitor Management System: SQL-Injection
- HighCVE-2026-129180A flaw has been found in projectworlds Visitor Management System 1.0. This vulnerability affects the function mysqli_query of the file actionpage.php. This m…
- Not ratedCVE-2026-102632Incorrect privilege assignment in the app token management component in Devolutions PowerShell Universal 2026.3.4 and earlier allows an authenticated user wi…
- MediumCVE-2026-68541PolicyPress is a compliance policy management tool for small and mid-size teams. Prior to version 1.4.1, sensitive content is disclosed via CSS-only web reda…
- HighCVE-2026-97361There exists an improper privilege management vulnerability that could cause privilege escalation at the SpaceCom and Space Battery pack SP with WiFi.
- HighCVE-2026-107398Indico is a feature-rich event management system. Prior to version 3.3.14, due to a path traversal vulnerability when building an "offline copy" of an event,…
- MediumCVE-2026-128078GLPI is a free asset and IT management software package. From 9.5.0 until 10.0.27 and 11.0.9, authenticated users could access ITIL followups, tasks, or solu…
Other news entries
- Your Endpoint Management Platform Could Be Your Biggest Security RiskNewsBleepingComputer
- N-able releases security hotfixes for zero-day vulnerabilitiesNewsBleepingComputer
- Finite State Raises $27 Million to Help Device Makers Fight ‘Vulnpocalypse’ with AI-Powered Product SecurityNewsCSO Online
- Cisco Identity Services Engine Authorization Bypass VulnerabilitiesNewsCisco PSIRT
- N-able N-central gets emergency fix two days after 33 exploits publishedNewsCSO Online
- Hackers exploit trusted AWS access to breach multiple cloud environmentsNewsBleepingComputer
- Self-service Security with vDefend and VCF AutomationNewsVMware Security Advisories
- Today: CISO Forum Virtual Summit 2026 Day 2 – Join Cybersecurity Leaders OnlineEventSecurityWeek
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4562
ID