Product by Check Point
Security Gateway
7 known vulnerabilities in Security Gateway (Check Point), 1 of them actively exploited (CISA KEV).
Key figures
7
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-85102 | Improper Certificate Validation in Quantum Security Gateway In CISA KEValso in 2 other products | 9.8 | |
| Critical | CVE-2026-85103 | Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding | 9.8 | |
| High | CVE-2026-48133 | Identity Awareness Captive Portal - Unauthenticated Local File Inclusion | 7.5 | |
| High | CVE-2026-48131 | VPND IKE Fragment Reassembly - Heap Out-of-Bounds Write via Sequence Number Zero | 8.1 | |
| High | CVE-2026-48132 | VPN service may restart unexpectedly when processing IKE traffic over NAT-T 4500/UDP | 8.1 | |
| Medium | CVE-2026-48134 | SQL injection issue in UserCheck Portal when DLP Software Blade is active | 5.6 | |
| Medium | CVE-2026-48135 | HTTP service can incorrectly process malformed HTTP requests | 5.3 |
News
- Check Point hacked: The security software protecting your network has become a prime attack targetcsoonline,
- Check Point warns of hackers exploiting Security Gateway VPN RCE flawbleepingcomputer,
- NCSC-2026-0365 [1.01] [H/H] Kwetsbaarheden verholpen in Check Point VPN-productenncsc-nl,
- Dutch NCSC: Critical Check Point VPN flaws exploitation is imminentbleepingcomputer,
- Check Point Patches Critical VPN Vulnerabilitiessecurityweek,
- NCSC-2026-0365 [1.00] [H/H] Kwetsbaarheden verholpen in Check Point VPN productenncsc-nl,