Vendor
Check Point
19 known vulnerabilities in products by Check Point, 3 of them actively exploited (CISA KEV).
Key figures
19
Vulnerabilities
3
Actively exploited (KEV)
0
Used by ransomware
8
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-93616 | Directory Traversal and File upload allows execution of arbitrary script on the Management Server In CISA KEValso in 2 other products | 9.8 | |
| Critical | CVE-2026-85102 | Improper Certificate Validation in Quantum Security Gateway In CISA KEValso in 2 other products | 9.8 | |
| Critical | CVE-2026-16232 | Authentication Bypass in the SmartConsole Login Process Using an Application Token In CISA KEValso in 2 other products | 9.8 | |
| Critical | CVE-2026-85103 | Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding | 9.8 | |
| High | CVE-2026-48133 | Identity Awareness Captive Portal - Unauthenticated Local File Inclusion | 7.5 | |
| High | CVE-2026-48131 | VPND IKE Fragment Reassembly - Heap Out-of-Bounds Write via Sequence Number Zero | 8.1 | |
| High | CVE-2026-48132 | VPN service may restart unexpectedly when processing IKE traffic over NAT-T 4500/UDP | 8.1 | |
| Medium | CVE-2026-48134 | SQL injection issue in UserCheck Portal when DLP Software Blade is active | 5.6 | |
| Medium | CVE-2019-8456 | Check Point IPsec VPN: Improper Access Control | 5.9 | |
| Medium | CVE-2026-48135 | HTTP service can incorrectly process malformed HTTP requests | 5.3 | |
| Critical | CVE-2026-62144 | Management Authentication Bypass and Privilege Escalation | 9.1 | |
| Critical | CVE-2026-18574 | Authentication Bypass in Check Point Security Management Server | — | |
| Critical | CVE-2026-91843 | Stack overflow in login process to the Security Management and Log Servers | 9.8 | |
| Critical | CVE-2019-8459 | Check Point Smartconsole For Endpoint Security Server: Unquoted Search Path or Element | 9.8 | |
| High | CVE-2019-8463 | Check Point Endpoint Security Client for Windows: Link Following | 7.5 | |
| High | CVE-2026-62145 | Local Privilege Escalation in Gaia Portal | 7.5 | |
| High | CVE-2024-6233 | Check Point ZoneAlarm Extreme Security Link Following Local Privilege Escalation Vulnerability | 7.8 | |
| Medium | CVE-2019-8458 | Checkpoint Capsule Docs: Process Control | 4.4 | |
| High | CVE-2019-8454 | Check Point Endpoint Security client for Windows: Windows Hard Link | 7.0 |
News
- Check Point hacked: The security software protecting your network has become a prime attack targetcsoonline,
- Check Point warns of hackers exploiting Security Gateway VPN RCE flawbleepingcomputer,
- NCSC-2026-0365 [1.01] [H/H] Kwetsbaarheden verholpen in Check Point VPN-productenncsc-nl,
- Vulnérabilité dans Check Point Security Management Server (23 septembre 2026)cert-fr,
- Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacksthehackernews,
- Dutch NCSC: Critical Check Point VPN flaws exploitation is imminentbleepingcomputer,
Products
| Security Gateway | 7 | 1 |
| Security Management | 4 | 1 |
| Smartconsole | 3 | 1 |