CH
Vendor
Checkpoint
206
CVEs
17
On KEV
0
New 30D
Products
SG9.8
Security Gateway
Checkpoint
8 CVEs2 on KEV0 new
QS9.8
Quantum Security Management
checkpoint
7 CVEs2 on KEV0 new
GO9.8
Gaia OS
Checkpoint
6 CVEs2 on KEV0 new
MS9.8
Multi-Domain Security Management
checkpoint
3 CVEs2 on KEV0 new
GE9.8
Gaia Embedded
Checkpoint
2 CVEs2 on KEV0 new
QS8.6
Quantum Security Gateway Firmware
Checkpoint
2 CVEs1 on KEV0 new
SF9.3
Spark Firewalls
checkpoint
2 CVEs1 on KEV0 new
CP8.6
Check Point Quantum Gateway, Spark Gateway and CloudGuard Network
checkpoint
1 CVEs1 on KEV0 new
CN8.6
Cloudguard Network
Checkpoint
1 CVEs1 on KEV0 new
CN8.6
Cloudguard Network Security
Checkpoint
1 CVEs1 on KEV0 new
QS8.6
Quantum Spark Appliances
Checkpoint
1 CVEs1 on KEV0 new
QS8.6
Quantum Spark Firmware
Checkpoint
1 CVEs1 on KEV0 new
FI7.5
Firewall-1
Checkpoint
43 CVEs0 on KEV0 new
ES7.8
Endpoint Security
Checkpoint
14 CVEs0 on KEV0 new
VP7.5
Vpn-1
Checkpoint
14 CVEs0 on KEV0 new
ZO8.8
Zonealarm
Checkpoint
14 CVEs0 on KEV0 new
CN–
Connectra Ngx
Checkpoint
4 CVEs0 on KEV0 new
PR7.5
Provider-1
Checkpoint
4 CVEs0 on KEV0 new
RA9.8
Remote Access Clients
Checkpoint
4 CVEs0 on KEV0 new
ES9.8
Endpoint Security Clients
Checkpoint
3 CVEs0 on KEV0 new
IA8.1
Identity Agent
checkpoint
3 CVEs0 on KEV0 new
MA5.4
Mobile Access
Checkpoint
3 CVEs0 on KEV0 new
RA5.4
Remote Access Vpn
Checkpoint
3 CVEs0 on KEV0 new
SM7.8
Smartconsole
Checkpoint
3 CVEs0 on KEV0 new
CD9.8
Capsule Docs Standalone Client
Checkpoint
2 CVEs0 on KEV0 new
GP7.2
Gaia Portal
Checkpoint
2 CVEs0 on KEV0 new
HE6.7
Harmony Endpoint
Checkpoint
2 CVEs0 on KEV0 new
NG–
Next Generation
Checkpoint
2 CVEs0 on KEV0 new
SN7.5
Ssl Network Extender
Checkpoint
2 CVEs0 on KEV0 new
VF–
Vpn-1 Firewall-1
Checkpoint
2 CVEs0 on KEV0 new
VS7.8
Vpn-1 Secureclient
Checkpoint
2 CVEs0 on KEV0 new
ZE8.8
Zonealarm Extreme Security
Checkpoint
2 CVEs0 on KEV0 new
ZE7.8
Zonealarm Extreme Security Nextgen
Checkpoint
2 CVEs0 on KEV0 new
CD4.4
Capsule Docs
Checkpoint
1 CVEs0 on KEV0 new
CW7.5
Capsule Workspace
Checkpoint
1 CVEs0 on KEV0 new
CP–
Check Point
Checkpoint
1 CVEs0 on KEV0 new
CP–
Check Point Integrity Client
Checkpoint
1 CVEs0 on KEV0 new
CP–
Check Point Vpn
Checkpoint
1 CVEs0 on KEV0 new
CP–
Check Point Vpn-1 Pro
Checkpoint
1 CVEs0 on KEV0 new
EC–
Endpoint Connect
Checkpoint
1 CVEs0 on KEV0 new
ES–
Endpoint Security MI Server R73
Checkpoint
1 CVEs0 on KEV0 new
ES9.8
Endpoint Security Server Package
Checkpoint
1 CVEs0 on KEV0 new
ES–
Endpoint Security Vpn
Checkpoint
1 CVEs0 on KEV0 new
EX–
Express
Checkpoint
1 CVEs0 on KEV0 new
FP–
Firewall-1 Pki Web Service
Checkpoint
1 CVEs0 on KEV0 new
HB7.8
Harmony Browse
Checkpoint
1 CVEs0 on KEV0 new
HS9.8
Harmony Sase
Checkpoint
1 CVEs0 on KEV0 new
IM6.4
Ica Management Portal
Checkpoint
1 CVEs0 on KEV0 new
IV5.9
Ipsec Vpn
Checkpoint
1 CVEs0 on KEV0 new
IO–
Ipso OS
Checkpoint
1 CVEs0 on KEV0 new
JH9.8
Jumbo Hotfix For Endpoint Security Server
Checkpoint
1 CVEs0 on KEV0 new
LS5.3
Log Server
Checkpoint
1 CVEs0 on KEV0 new
MS–
Management Server
Checkpoint
1 CVEs0 on KEV0 new
MA7.2
Mobile Access Portal Agent
Checkpoint
1 CVEs0 on KEV0 new
MM5.9
Multi-domain Management Firmware
Checkpoint
1 CVEs0 on KEV0 new
MM–
Multi-domain Management/provider-1
Checkpoint
1 CVEs0 on KEV0 new
MS9.3
Multi-Domain Security Management Server
checkpoint
1 CVEs0 on KEV0 new
NG–
Ng-ai
Checkpoint
1 CVEs0 on KEV0 new
QS5.9
Quantum Security Management Firmware
Checkpoint
1 CVEs0 on KEV0 new
SA7.8
Sandblast Agent For Browsers
Checkpoint
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-93616 In wildKEV | QS Quantum Security Management checkpoint | 9.8 | Sep 22 | Directory Traversal and File upload allows execution of arbitrary script on the Management Server |
| CVE-2026-91843 | QS Quantum Security Management checkpoint | 9.8 | Sep 16 | Stack overflow in login process to the Security Management and Log Servers |
| CVE-2026-85103 | QS Quantum Security Management checkpoint | 9.8 | Sep 9 | Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding |
| CVE-2026-85102 In wildKEV | GO Gaia OS Checkpoint | 9.8 | Sep 9 | Improper Certificate Validation in Quantum Security Gateway |
| CVE-2026-18574 | SM Security Management Server checkpoint | 9.3 | Aug 3 | Authentication Bypass in Check Point Security Management Server |
| CVE-2026-62145 | QS Quantum Security Management checkpoint | 7.5 | Jul 22 | Local Privilege Escalation in Gaia Portal |
| CVE-2026-62144 | MS Multi-Domain Security Management checkpoint | 9.1 | Jul 22 | Management Authentication Bypass and Privilege Escalation |
| CVE-2026-16232 In wildKEV | MS Multi-Domain Security Management checkpoint | 9.8 | Jul 22 | Authentication Bypass in the SmartConsole Login Process Using an Application Token |
| CVE-2026-10847 | IA Identity Agent checkpoint | 7.8 | Jun 11 | Local Privilege Escalation vulnerability in Check Point Identity Agent Full for Windows OS |
| CVE-2026-50751 RansomwareIn wildKEV | SF Spark Firewalls checkpoint | 9.3 | Jun 8 | User Authentication Bypass in VPN Remote Access and Mobile Access |
| CVE-2026-50752 | SF Spark Firewalls checkpoint | 7.4 | Jun 8 | Certificate Validation Bypass in VPN Site-to-Site Connections Using IKEv1 |
| CVE-2026-48136 | QS Quantum Security Management checkpoint | 4.1 | May 26 | Authenticated Administrator Role-Based Access Control Bypass in Compliance |
| CVE-2025-3831 | HS Harmony Sase Checkpoint | 9.8 | Aug 12 | Log files uploaded during troubleshooting by the Harmony SASE agent may have been accessible to unauthorized parties |
| CVE-2025-2028 | LS Log Server Checkpoint | 5.3 | Aug 6 | Lack of TLS validation when downloading a CSV file including mapping from IPs to countries used ONLY for displaying country flags in logs |
| CVE-2024-52885 | RA Remote Access Vpn Checkpoint | 5.4 | Aug 6 | The Mobile Access Portal's File Share application is vulnerable to a directory traversal attack, allowing an authenticated, malicious end-user (authorized to at least one File… |
| CVE-2024-24915 | SM Smartconsole Checkpoint | 7.2 | Jun 29 | Credentials are not cleared from memory after being used |
| CVE-2024-24916 | SM Smartconsole Checkpoint | 7.8 | Jun 19 | Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileges (admin) |
| CVE-2024-52888 | RA Remote Access Vpn Checkpoint | 5.4 | Apr 27 | For an authenticated end-user the portal may run a script while attempting to display a directory or some file's properties |
| CVE-2024-52887 | RA Remote Access Vpn Checkpoint | 5.4 | Apr 27 | Authenticated end-user may set a specially crafted SNX bookmark that can make their browser run a script while accessing their own bookmark list |
| CVE-2024-24911 | GO Gaia OS Checkpoint | 7.5 | Feb 6 | In rare scenarios, the cpca process on the Security Management Server / Domain Management Server may exit unexpectedly, creating a core dump file |
| CVE-2024-6233 | ZE Zonealarm Extreme Security Nextgen Checkpoint | 7.8 | Nov 22 | Check Point ZoneAlarm Extreme Security Link Following Local Privilege Escalation Vulnerability |
| CVE-2024-24914 | GO Gaia OS Checkpoint | 8.0 | Nov 7 | Authenticated Gaia users can inject code or commands by global variables through special HTTP requests |
| CVE-2024-24919 RansomwareIn wildKEV | CP Check Point Quantum Gateway, Spark Gateway and CloudGuard Network checkpoint | 8.6 | May 28 | Information disclosure |
| CVE-2024-24912 | HE Harmony Endpoint Checkpoint | 6.7 | May 1 | A local privilege escalation vulnerability has been identified in Harmony Endpoint Security Client for Windows versions E88.10 and below |
| CVE-2024-24910 | ZE Zonealarm Extreme Security Nextgen Checkpoint | 7.3 | Apr 18 | A local attacker can erscalate privileges on affected Check Point ZoneAlarm ExtremeSecurity NextGen, Identity Agent for Windows, and Identity Agent for Windows Terminal Server |
| CVE-2023-28134 | ES Endpoint Security Checkpoint | 7.8 | Nov 12 | Local attacker can escalate privileges on affected installations of Check Point Harmony Endpoint/ZoneAlarm Extreme Security |
| CVE-2023-28130 | GP Gaia Portal Checkpoint | 7.2 | Jul 26 | Local user may lead to privilege escalation using Gaia Portal hostnames page |
| CVE-2023-28133 | ES Endpoint Security Checkpoint | 7.8 | Jul 23 | Local privilege escalation in Check Point Endpoint Security Client (version E87.30) via crafted OpenSSL configuration file |
| CVE-2022-23746 | SN Ssl Network Extender Checkpoint | 7.5 | Nov 30 | The IPsec VPN blade has a dedicated portal for downloading and connecting through SSL Network Extender (SNX) |
| CVE-2022-41604 | ZO Zonealarm Checkpoint | 8.8 | Sep 27 | Check Point ZoneAlarm Extreme Security before 15.8.211.19229 allows local users to escalate privileges |
| CVE-2022-23745 | CW Capsule Workspace Checkpoint | 7.5 | Jul 18 | A potential memory corruption issue was found in Capsule Workspace Android app (running on GrapheneOS) |
| CVE-2022-23744 | ES Endpoint Security Checkpoint | 2.3 | Jul 7 | Check Point Endpoint before version E86.50 failed to protect against specific registry change which allowed to disable endpoint protection by a local administrator |
| CVE-2022-23742 | ES Endpoint Security Checkpoint | 7.8 | May 12 | Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low privileges |
| CVE-2021-30361 | GO Gaia OS Checkpoint | 6.7 | May 11 | The Check Point Gaia Portal's GUI Clients allowed authenticated administrators with permission for the GUI Clients settings to inject a command that would run on the Gaia OS |
| CVE-2022-23743 | ZO Zonealarm Checkpoint | 7.8 | May 11 | Check Point ZoneAlarm before version 15.8.200.19118 allows a local actor to escalate privileges during the upgrade process |
| CVE-2021-30360 | ES Endpoint Security Checkpoint | 7.8 | Jan 10 | Users have access to the directory where the installation repair occurs |
| CVE-2021-30359 | SA Sandblast Agent For Browsers Checkpoint | 7.8 | Oct 22 | The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to execute some steps during the installation |
| CVE-2021-30358 | MA Mobile Access Portal Agent Checkpoint | 7.2 | Oct 19 | Mobile Access Portal Native Applications who's path is defined by the administrator with environment variables may run applications from other locations by the Mobile Access… |
| CVE-2021-30357 | SN Ssl Network Extender Checkpoint | 5.3 | Jun 8 | SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the configuration file supplied, which allows partially disclosing files to which the… |
| CVE-2021-30356 | IA Identity Agent Checkpoint | 8.1 | Apr 22 | A denial of service vulnerability was reported in Check Point Identity Agent before R81.018.0000, which could allow low privileged users to overwrite protected system files |
| CVE-2021-3449 | QS Quantum Security Management Firmware Checkpoint | 5.9 | Mar 25 | NULL pointer deref in signature_algorithms processing |
| CVE-2020-6024 | SM Smartconsole Checkpoint | 7.8 | Jan 20 | Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and R81 before Build 548 were vulnerable to a possible local… |
| CVE-2020-6021 | ES Endpoint Security Checkpoint | 7.8 | Dec 3 | Check Point Endpoint Security Client for Windows before version E84.20 allows write access to the directory from which the installation repair takes place |
| CVE-2020-6015 | ES Endpoint Security Checkpoint | 5.5 | Nov 5 | Check Point Endpoint Security for Windows before E84.10 can reach denial of service during clean install of the client which will prevent the storage of service log files in… |
| CVE-2020-6014 | ES Endpoint Security Checkpoint | 6.5 | Nov 2 | Check Point Endpoint Security Client for Windows, with Anti-Bot or Threat Emulation blades installed, before version E83.20, tries to load a non-existent DLL during a query for… |
| CVE-2020-6023 | ZO Zonealarm Checkpoint | 7.8 | Oct 27 | Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to escalate privileges while restoring files in Anti-Ransomware |
| CVE-2020-6022 | ZO Zonealarm Checkpoint | 5.5 | Oct 27 | Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to delete arbitrary files while restoring files in Anti-Ransomware |
| CVE-2020-6020 | IM Ica Management Portal Checkpoint | 6.4 | Sep 24 | Check Point Security Management's Internal CA web management before Jumbo HFAs R80.10 Take 278, R80.20 Take 160, R80.30 Take 210, and R80.40 Take 38, can be manipulated to run… |
| CVE-2020-6012 | ZA Zonealarm Anti-ransomware Checkpoint | 7.4 | Aug 4 | ZoneAlarm Anti-Ransomware before version 1.0.713 copies files for the report from a directory with low privileges |
| CVE-2020-6013 | ZE Zonealarm Extreme Security Checkpoint | 8.8 | Jul 6 | ZoneAlarm Firewall and Antivirus products before version 15.8.109.18436 allow an attacker who already has access to the system to execute code at elevated privileges through a… |
| CVE-2019-8463 | ES Endpoint Security Clients Checkpoint | 7.5 | Dec 23 | A denial of service vulnerability was reported in Check Point Endpoint Security Client for Windows before E82.10, that could allow service log file to be written to non-standard… |
| CVE-2019-8462 | SG Security Gateway Checkpoint | 7.5 | Oct 2 | In a rare scenario, Check Point R80.30 Security Gateway before JHF Take 50 managed by Check Point R80.30 Management crashes with a unique configuration of enhanced logging |
| CVE-2019-8461 | ES Endpoint Security Checkpoint | 7.8 | Aug 29 | Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH location on a clean image without Endpoint Client installed |
| CVE-2019-8459 | SF Smartconsole For Endpoint Security Server Checkpoint | 9.8 | Jun 20 | Check Point Endpoint Security Client for Windows, with the VPN blade, before version E80.83, starts a process without using quotes in the path |
| CVE-2019-8458 | ES Endpoint Security Clients Checkpoint | 4.4 | Jun 20 | Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before version E81.00, tries to load a non-existent DLL during an update initiated by the UI |
| CVE-2019-8454 | ES Endpoint Security Checkpoint | 7.0 | Apr 29 | A local attacker can create a hard-link between a file to which the Check Point Endpoint Security client for Windows before E80.96 writes and another BAT file, then by… |
| CVE-2019-8452 | ZO Zonealarm Checkpoint | 7.8 | Apr 22 | A hard-link created from log file archive of Check Point ZoneAlarm up to 15.4.062 or Check Point Endpoint Security client for Windows before E80.96 to any file on the system will… |
| CVE-2019-8455 | ZO Zonealarm Checkpoint | 7.1 | Apr 17 | A hard-link created from the log file of Check Point ZoneAlarm up to 15.4.062 to any file on the system will get its permission changed so that all users can access that linked… |
| CVE-2019-8453 | ZO Zonealarm Checkpoint | 5.5 | Apr 17 | Some of the DLLs loaded by Check Point ZoneAlarm up to 15.4.062 are taken from directories where all users have write permissions |
| CVE-2019-8456 | IV Ipsec Vpn Checkpoint | 5.9 | Apr 9 | Check Point IKEv2 IPsec VPN up to R80.30, in some less common conditions, may allow an attacker with knowledge of the internal configuration and setup to successfully connect to a… |