Check Point Security Management und Security Gateway: Mehrere Schwachstellen ermöglichen Erlangen von Administratorrechten
Eigenanreicherung – kein Mirror der Originalquelle
Ein Angreifer kann mehrere Schwachstellen in Check Point Security Management und Check Point Security Gateway ausnutzen, um Administratorrechte zu erlangen. Es wird empfohlen, die neuesten Sicherheitsupdates von Check Point zu installieren, um diese Schwachstellen zu beheben.
Quelle: BSI CERT-Bund. NEOSEC Intel zeigt aus lizenzrechtlichen Gründen keine 1:1-Spiegelung. Volltext und Experten-Einordnung finden Sie beim Original.
Ausgabe bei BSI CERT-Bund lesenVollständiges Advisory
Kritischbsi:WID-SEC-2026-45622 verknüpfte CVEs
Advisory mit allen CVEs öffnen
Mehr zu Management
Weitere Advisories
- HochCVE-2026-129180Projectworlds Pvt. Visitor Management System: SQL-Injection
- HochCVE-2026-129180Projectworlds Pvt. Visitor Management System: SQL-Injection
- HochCVE-2026-129180A flaw has been found in projectworlds Visitor Management System 1.0. This vulnerability affects the function mysqli_query of the file actionpage.php. This m…
- Ohne BewertungCVE-2026-102632Incorrect privilege assignment in the app token management component in Devolutions PowerShell Universal 2026.3.4 and earlier allows an authenticated user wi…
- MittelCVE-2026-68541PolicyPress is a compliance policy management tool for small and mid-size teams. Prior to version 1.4.1, sensitive content is disclosed via CSS-only web reda…
- HochCVE-2026-97361There exists an improper privilege management vulnerability that could cause privilege escalation at the SpaceCom and Space Battery pack SP with WiFi.
- HochCVE-2026-107398Indico is a feature-rich event management system. Prior to version 3.3.14, due to a path traversal vulnerability when building an "offline copy" of an event,…
- MittelCVE-2026-128078GLPI is a free asset and IT management software package. From 9.5.0 until 10.0.27 and 11.0.9, authenticated users could access ITIL followups, tasks, or solu…
Weitere News-Einträge
- Your Endpoint Management Platform Could Be Your Biggest Security RiskNewsBleepingComputer
- N-able releases security hotfixes for zero-day vulnerabilitiesNewsBleepingComputer
- Finite State Raises $27 Million to Help Device Makers Fight ‘Vulnpocalypse’ with AI-Powered Product SecurityNewsCSO Online
- Cisco Identity Services Engine Authorization Bypass VulnerabilitiesNewsCisco PSIRT
- N-able N-central gets emergency fix two days after 33 exploits publishedNewsCSO Online
- Hackers exploit trusted AWS access to breach multiple cloud environmentsNewsBleepingComputer
- Self-service Security with vDefend and VCF AutomationNewsVMware Security Advisories
- Today: CISO Forum Virtual Summit 2026 Day 2 – Join Cybersecurity Leaders OnlineTerminSecurityWeek
Quelle: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4562
ID