Product by Check Point

    Quantum Security Gateway

    10 known vulnerabilities in Quantum Security Gateway (Check Point), 2 of them actively exploited (CISA KEV).

    Key figures

    10

    Vulnerabilities

    2

    Actively exploited (KEV)

    1

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Quantum Security Gateway (Check Point)
    CriticalCVE-2026-50751

    User Authentication Bypass in VPN Remote Access and Mobile Access

    In CISA KEVRansomwarealso in 1 other product

    		9.3
    CriticalCVE-2026-85102

    Improper Certificate Validation in Quantum Security Gateway

    In CISA KEValso in 2 other products

    		9.8
    CriticalCVE-2026-85103

    Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding

    also in 3 other products

    		9.8
    HighCVE-2026-50752

    Certificate Validation Bypass in VPN Site-to-Site Connections Using IKEv1

    		7.4
    HighCVE-2026-48133

    Identity Awareness Captive Portal - Unauthenticated Local File Inclusion

    also in 1 other product

    		7.5
    HighCVE-2026-48131

    VPND IKE Fragment Reassembly - Heap Out-of-Bounds Write via Sequence Number Zero

    also in 1 other product

    		8.1
    HighCVE-2026-48132

    VPN service may restart unexpectedly when processing IKE traffic over NAT-T 4500/UDP

    also in 1 other product

    		8.1
    MediumCVE-2026-48134

    SQL injection issue in UserCheck Portal when DLP Software Blade is active

    also in 1 other product

    		5.6
    MediumCVE-2026-48135

    HTTP service can incorrectly process malformed HTTP requests

    also in 1 other product

    		5.3
    HighCVE-2026-62145

    Local Privilege Escalation in Gaia Portal

    also in 2 other products

    		7.5

    News

    All products by Check Point