High severity · published Jun 11, 2026
CVE-2026-10847
Local Privilege Escalation vulnerability in Check Point Identity Agent Full for Windows OS
7.8
CVSS
0.1%
EPSS
No
On KEV
Description
A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS. An authenticated local user may be able to execute arbitrary code with SYSTEM privileges due to improper handling of executable resolution during the log collection process. Successful exploitation could allow an attacker to gain elevated privileges on the affected Windows endpoint.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 2% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IA
Identity Agent · checkpoint
Versions prior to 81.087.0000 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-10847
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-10847
support.checkpoint.com
https://support.checkpoint.com/results/sk/sk185052
More from Identity Agent
8.1
CVE-2021-30356
A denial of service vulnerability was reported in Check Point Identity Agent before R81.018.0000, which could allow low privileged users to overwrite protected system files
7.3
CVE-2024-24910
A local attacker can erscalate privileges on affected Check Point ZoneAlarm ExtremeSecurity NextGen, Identity Agent for Windows, and Identity Agent for Windows Terminal Server