Known vulnerabilities in checkpoint Quantum Security Gateway
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-85103 | A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute… | 9.8 Critical | Sep 9, 2026 |
| CVE-2026-85102 | Exploited Check Point Multiple Products Improper Certificate Validation Vulnerability | 9.8 Critical | Sep 9, 2026 |
| CVE-2026-62145 | A vulnerability in Check Point Gaia Portal allows an authenticated attacker with read-only Gaia Portal privileges to… | 7.5 High | Jul 22, 2026 |
| CVE-2026-50751 | Exploited Check Point Security Gateway Improper Authentication Vulnerability | Not rated | Jun 8, 2026 |
| CVE-2026-50752 | A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an unauthenticated… | 7.4 High | Jun 8, 2026 |
| CVE-2026-48135 | A Check Point HTTP-based service can incorrectly handle malformed HTTP requests | 5.3 Medium | May 26, 2026 |
| CVE-2026-48134 | When the DLP is active, the UserCheck Web Portal contains an input-handling issue in the UserChoice flow | 5.6 Medium | May 26, 2026 |
| CVE-2026-48133 | When the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated user may be able to… | 7.5 High | May 26, 2026 |
| CVE-2026-48132 | The Security Gateway does not correctly validate a length value in certain IKE packets when NAT-T is used (4500/UDP) | 8.1 High | May 26, 2026 |
| CVE-2026-48131 | The VPN service may mishandle an unexpected IKE fragment value received on the IKE port 500/UDP during the early stage… | 8.1 High | May 26, 2026 |
Other checkpoint products
Quantum Security Management 7
Check Point Mobile Access 3
Multi-Domain Security Management 2
Identity Agent 2
Spark Firewalls 2
Check Point SmartConsole 2
quantum_appliances 1
ZoneAlarmExtremeSecurityNextGen,IdentityAgentforWindows,IdentityAgentforWindowsTerminalServer 1
quantum_maestro 1
quantum_security_gateway 1
Multi-Domain Security Management Server 1
multi-domain_management 1