Vulnerability-Lookup

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

Full-Text Search

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

CVE-2026-93616 (GCVE-0-2026-93616)

Vulnerability from nvd – Published: 2026-09-22 12:59 – Updated: 2026-09-23 03:55

CISA ENISA Previdian

Title

Directory Traversal and File upload allows execution of arbitrary script on the Management Server

Summary

A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: active Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-22 00:00 UTC

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal').

Assigner

checkpoint mitre root Scorecard

References

3 references

URL	Tags
https://support.checkpoint.com/results/sk/sk1000171
https://blog.checkpoint.com/security/security-adv…	vendor-advisory
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource

Impacted products

1 product

Vendor	Product	Version
checkpoint	Quantum Security Management	Affected: R82.20 with no Jumbo Hotfix Affected: R82.10 with Jumbo Hotfix Take 44 or below Affected: R82 with Jumbo Hotfix Take 126 or below Affected: R81.20 with Jumbo Hotfix Take 166 or below Affected: R81.10 (EOS) with Jumbo Hotfix Take 190 or below Affected: R81 (EOS) Affected: R80.40 (EOS) Affected: R80.30 (EOS) Affected: R80.20 (EOS) Affected: R80.10 (EOS) Affected: R80 (EOS)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-93616",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-22T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2026-09-22",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-93616"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-23T03:55:59.259Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "vendor-advisory"
            ],
            "url": "https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616/"
          },
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-93616"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-09-22T00:00:00.000Z",
            "value": "CVE-2026-93616 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Quantum Security Management",
          "vendor": "checkpoint",
          "versions": [
            {
              "status": "affected",
              "version": "R82.20 with no Jumbo Hotfix"
            },
            {
              "status": "affected",
              "version": "R82.10 with Jumbo Hotfix Take 44 or below"
            },
            {
              "status": "affected",
              "version": "R82 with Jumbo Hotfix Take 126 or below"
            },
            {
              "status": "affected",
              "version": "R81.20 with Jumbo Hotfix Take 166 or below"
            },
            {
              "status": "affected",
              "version": "R81.10 (EOS) with Jumbo Hotfix Take 190 or below"
            },
            {
              "status": "affected",
              "version": "R81 (EOS)"
            },
            {
              "status": "affected",
              "version": "R80.40 (EOS)"
            },
            {
              "status": "affected",
              "version": "R80.30 (EOS)"
            },
            {
              "status": "affected",
              "version": "R80.20 (EOS)"
            },
            {
              "status": "affected",
              "version": "R80.10 (EOS)"
            },
            {
              "status": "affected",
              "version": "R80 (EOS)"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027).",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-22T12:59:01.057Z",
        "orgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
        "shortName": "checkpoint"
      },
      "references": [
        {
          "url": "https://support.checkpoint.com/results/sk/sk1000171"
        }
      ],
      "title": "Directory Traversal and File upload allows execution of arbitrary script on the Management Server",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
    "assignerShortName": "checkpoint",
    "cveId": "CVE-2026-93616",
    "datePublished": "2026-09-22T12:59:01.057Z",
    "dateReserved": "2026-09-18T11:08:38.818Z",
    "dateUpdated": "2026-09-23T03:55:59.259Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-16232 (GCVE-0-2026-16232)

Vulnerability from nvd – Published: 2026-07-22 13:53 – Updated: 2026-08-10 18:34

CISA CIRCL Previdian

Title

Authentication Bypass in the SmartConsole Login Process Using an Application Token

Summary

An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers.

Severity

9.3 (Critical)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: active Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-23 03:55 UTC

CWE

CWE-287 - Improper Authentication.

Assigner

checkpoint mitre root Scorecard

References

2 references

URL	Tags
https://support.checkpoint.com/results/sk/sk185169
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource

Impacted products

2 products

Vendor	Product	Version
checkpoint	Quantum Security Management	Affected: R82.10 with Jumbo Hotfix Take 36 or below Affected: R82 with Jumbo Hotfix Take 118 or below Affected: R81.20 with Jumbo Hotfix Take 158 or below Affected: R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30
checkpoint	Multi-Domain Security Management	Affected: R82.10 with Jumbo Hotfix Take 36 or below Affected: R82 with Jumbo Hotfix Take 118 or below Affected: R81.20 with Jumbo Hotfix Take 158 or below Affected: R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-16232",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-23T03:55:51.690584Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2026-07-22",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-16232"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-10T18:34:01.548Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-16232"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Quantum Security Management",
          "vendor": "checkpoint",
          "versions": [
            {
              "status": "affected",
              "version": "R82.10 with Jumbo Hotfix Take 36 or below"
            },
            {
              "status": "affected",
              "version": "R82 with Jumbo Hotfix Take 118 or below"
            },
            {
              "status": "affected",
              "version": "R81.20 with Jumbo Hotfix Take 158 or below"
            },
            {
              "status": "affected",
              "version": "R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30"
            }
          ]
        },
        {
          "product": "Multi-Domain Security Management",
          "vendor": "checkpoint",
          "versions": [
            {
              "status": "affected",
              "version": "R82.10 with Jumbo Hotfix Take 36 or below"
            },
            {
              "status": "affected",
              "version": "R82 with Jumbo Hotfix Take 118 or below"
            },
            {
              "status": "affected",
              "version": "R81.20 with Jumbo Hotfix Take 158 or below"
            },
            {
              "status": "affected",
              "version": "R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-287",
              "description": "CWE-287: Improper Authentication.",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-02T07:06:06.363Z",
        "orgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
        "shortName": "checkpoint"
      },
      "references": [
        {
          "url": "https://support.checkpoint.com/results/sk/sk185169"
        }
      ],
      "title": "Authentication Bypass in the SmartConsole Login Process Using an Application Token",
      "x_generator": {
        "engine": "cveClient/1.0.25"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
    "assignerShortName": "checkpoint",
    "cveId": "CVE-2026-16232",
    "datePublished": "2026-07-22T13:53:09.830Z",
    "dateReserved": "2026-07-19T12:14:17.233Z",
    "dateUpdated": "2026-08-10T18:34:01.548Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-24914 (GCVE-0-2024-24914)

Vulnerability from nvd – Published: 2024-11-07 11:25 – Updated: 2024-11-07 17:33

Summary

Authenticated Gaia users can inject code or commands by global variables through special HTTP requests. A Security fix that mitigates this vulnerability is available.

Severity

8 (High)


                        
                          CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-11-07 16:56 UTC

CWE

CWE-914 - Improper Control of Dynamically-Identified Variables

Assigner

checkpoint mitre root Scorecard

References

1 reference

URL	Tags
https://support.checkpoint.com/results/sk/sk182743

Impacted products

8 products

Vendor	Product	Version
checkpoint	ClusterXL, Multi-Domain Security Management, Quantum Appliances, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Security Management	Affected: Check Point Quantum Gateways versions R81, R81.10, R81.20
checkpoint	clusterxl	Affected: r81 Affected: r81.10 Affected: r81.20 cpe:2.3:a:checkpoint:clusterxl::::::::
checkpoint	multi-domain_management	Affected: r81 Affected: r81.10 Affected: r81.20 cpe:2.3:a:checkpoint:multi-domain_management::::::::
checkpoint	quantum_appliances	Affected: r81 Affected: r81.10 Affected: r81.20 cpe:2.3:a:checkpoint:quantum_appliances::::::::
checkpoint	quantum_maestro	Affected: r81 Affected: r81.10 Affected: r81.20 cpe:2.3:a:checkpoint:quantum_maestro::::::::
checkpoint	quantum_scalable_chassis	Affected: r81 Affected: r81.10 Affected: r81.20 cpe:2.3:a:checkpoint:quantum_scalable_chassis::::::::
checkpoint	quantum_security_gateway	Affected: r81 Affected: r81.10 Affected: r81.20 cpe:2.3:a:checkpoint:quantum_security_gateway::::::::
checkpoint	quantum_security_management	Affected: r81 Affected: r81.10 Affected: r81.20 cpe:2.3:a:checkpoint:quantum_security_management::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:checkpoint:clusterxl:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "clusterxl",
            "vendor": "checkpoint",
            "versions": [
              {
                "status": "affected",
                "version": "r81"
              },
              {
                "status": "affected",
                "version": "r81.10"
              },
              {
                "status": "affected",
                "version": "r81.20"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:checkpoint:multi-domain_management:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "multi-domain_management",
            "vendor": "checkpoint",
            "versions": [
              {
                "status": "affected",
                "version": "r81"
              },
              {
                "status": "affected",
                "version": "r81.10"
              },
              {
                "status": "affected",
                "version": "r81.20"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:checkpoint:quantum_appliances:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "quantum_appliances",
            "vendor": "checkpoint",
            "versions": [
              {
                "status": "affected",
                "version": "r81"
              },
              {
                "status": "affected",
                "version": "r81.10"
              },
              {
                "status": "affected",
                "version": "r81.20"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:checkpoint:quantum_maestro:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "quantum_maestro",
            "vendor": "checkpoint",
            "versions": [
              {
                "status": "affected",
                "version": "r81"
              },
              {
                "status": "affected",
                "version": "r81.10"
              },
              {
                "status": "affected",
                "version": "r81.20"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:checkpoint:quantum_scalable_chassis:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "quantum_scalable_chassis",
            "vendor": "checkpoint",
            "versions": [
              {
                "status": "affected",
                "version": "r81"
              },
              {
                "status": "affected",
                "version": "r81.10"
              },
              {
                "status": "affected",
                "version": "r81.20"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:checkpoint:quantum_security_gateway:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "quantum_security_gateway",
            "vendor": "checkpoint",
            "versions": [
              {
                "status": "affected",
                "version": "r81"
              },
              {
                "status": "affected",
                "version": "r81.10"
              },
              {
                "status": "affected",
                "version": "r81.20"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:checkpoint:quantum_security_management:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "quantum_security_management",
            "vendor": "checkpoint",
            "versions": [
              {
                "status": "affected",
                "version": "r81"
              },
              {
                "status": "affected",
                "version": "r81.10"
              },
              {
                "status": "affected",
                "version": "r81.20"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-24914",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-07T16:56:57.795526Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-07T17:33:31.286Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "ClusterXL, Multi-Domain Security Management, Quantum Appliances, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Security Management",
          "vendor": "checkpoint",
          "versions": [
            {
              "status": "affected",
              "version": "Check Point Quantum Gateways versions R81, R81.10, R81.20"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Authenticated Gaia users can inject code or commands by global variables through special HTTP requests. A Security fix that mitigates this vulnerability is available."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-914",
              "description": "CWE-914: Improper Control of Dynamically-Identified Variables",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-07T11:25:53.238Z",
        "orgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
        "shortName": "checkpoint"
      },
      "references": [
        {
          "url": "https://support.checkpoint.com/results/sk/sk182743"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
    "assignerShortName": "checkpoint",
    "cveId": "CVE-2024-24914",
    "datePublished": "2024-11-07T11:25:53.238Z",
    "dateReserved": "2024-02-01T15:19:26.278Z",
    "dateUpdated": "2024-11-07T17:33:31.286Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2026-93616 (GCVE-0-2026-93616)

Vulnerability from cvelistv5 – Published: 2026-09-22 12:59 – Updated: 2026-09-23 03:55

CISA ENISA Previdian

Title

Directory Traversal and File upload allows execution of arbitrary script on the Management Server

Summary

A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: active Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-22 00:00 UTC

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal').

Assigner

checkpoint mitre root Scorecard

References

3 references

URL	Tags
https://support.checkpoint.com/results/sk/sk1000171
https://blog.checkpoint.com/security/security-adv…	vendor-advisory
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource

Impacted products

1 product

Vendor	Product	Version
checkpoint	Quantum Security Management	Affected: R82.20 with no Jumbo Hotfix Affected: R82.10 with Jumbo Hotfix Take 44 or below Affected: R82 with Jumbo Hotfix Take 126 or below Affected: R81.20 with Jumbo Hotfix Take 166 or below Affected: R81.10 (EOS) with Jumbo Hotfix Take 190 or below Affected: R81 (EOS) Affected: R80.40 (EOS) Affected: R80.30 (EOS) Affected: R80.20 (EOS) Affected: R80.10 (EOS) Affected: R80 (EOS)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-93616",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-22T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2026-09-22",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-93616"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-23T03:55:59.259Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "vendor-advisory"
            ],
            "url": "https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and-a-management-pre-authentication-vulnerability-cve-2026-93616/"
          },
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-93616"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-09-22T00:00:00.000Z",
            "value": "CVE-2026-93616 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Quantum Security Management",
          "vendor": "checkpoint",
          "versions": [
            {
              "status": "affected",
              "version": "R82.20 with no Jumbo Hotfix"
            },
            {
              "status": "affected",
              "version": "R82.10 with Jumbo Hotfix Take 44 or below"
            },
            {
              "status": "affected",
              "version": "R82 with Jumbo Hotfix Take 126 or below"
            },
            {
              "status": "affected",
              "version": "R81.20 with Jumbo Hotfix Take 166 or below"
            },
            {
              "status": "affected",
              "version": "R81.10 (EOS) with Jumbo Hotfix Take 190 or below"
            },
            {
              "status": "affected",
              "version": "R81 (EOS)"
            },
            {
              "status": "affected",
              "version": "R80.40 (EOS)"
            },
            {
              "status": "affected",
              "version": "R80.30 (EOS)"
            },
            {
              "status": "affected",
              "version": "R80.20 (EOS)"
            },
            {
              "status": "affected",
              "version": "R80.10 (EOS)"
            },
            {
              "status": "affected",
              "version": "R80 (EOS)"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027).",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-22T12:59:01.057Z",
        "orgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
        "shortName": "checkpoint"
      },
      "references": [
        {
          "url": "https://support.checkpoint.com/results/sk/sk1000171"
        }
      ],
      "title": "Directory Traversal and File upload allows execution of arbitrary script on the Management Server",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
    "assignerShortName": "checkpoint",
    "cveId": "CVE-2026-93616",
    "datePublished": "2026-09-22T12:59:01.057Z",
    "dateReserved": "2026-09-18T11:08:38.818Z",
    "dateUpdated": "2026-09-23T03:55:59.259Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-16232 (GCVE-0-2026-16232)

Vulnerability from cvelistv5 – Published: 2026-07-22 13:53 – Updated: 2026-08-10 18:34

CISA CIRCL Previdian

Title

Authentication Bypass in the SmartConsole Login Process Using an Application Token

Summary

An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers.

Severity

9.3 (Critical)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: active Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-23 03:55 UTC

CWE

CWE-287 - Improper Authentication.

Assigner

checkpoint mitre root Scorecard

References

2 references

URL	Tags
https://support.checkpoint.com/results/sk/sk185169
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource

Impacted products

2 products

Vendor	Product	Version
checkpoint	Quantum Security Management	Affected: R82.10 with Jumbo Hotfix Take 36 or below Affected: R82 with Jumbo Hotfix Take 118 or below Affected: R81.20 with Jumbo Hotfix Take 158 or below Affected: R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30
checkpoint	Multi-Domain Security Management	Affected: R82.10 with Jumbo Hotfix Take 36 or below Affected: R82 with Jumbo Hotfix Take 118 or below Affected: R81.20 with Jumbo Hotfix Take 158 or below Affected: R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-16232",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-23T03:55:51.690584Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2026-07-22",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-16232"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-10T18:34:01.548Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-16232"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Quantum Security Management",
          "vendor": "checkpoint",
          "versions": [
            {
              "status": "affected",
              "version": "R82.10 with Jumbo Hotfix Take 36 or below"
            },
            {
              "status": "affected",
              "version": "R82 with Jumbo Hotfix Take 118 or below"
            },
            {
              "status": "affected",
              "version": "R81.20 with Jumbo Hotfix Take 158 or below"
            },
            {
              "status": "affected",
              "version": "R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30"
            }
          ]
        },
        {
          "product": "Multi-Domain Security Management",
          "vendor": "checkpoint",
          "versions": [
            {
              "status": "affected",
              "version": "R82.10 with Jumbo Hotfix Take 36 or below"
            },
            {
              "status": "affected",
              "version": "R82 with Jumbo Hotfix Take 118 or below"
            },
            {
              "status": "affected",
              "version": "R81.20 with Jumbo Hotfix Take 158 or below"
            },
            {
              "status": "affected",
              "version": "R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-287",
              "description": "CWE-287: Improper Authentication.",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-02T07:06:06.363Z",
        "orgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
        "shortName": "checkpoint"
      },
      "references": [
        {
          "url": "https://support.checkpoint.com/results/sk/sk185169"
        }
      ],
      "title": "Authentication Bypass in the SmartConsole Login Process Using an Application Token",
      "x_generator": {
        "engine": "cveClient/1.0.25"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
    "assignerShortName": "checkpoint",
    "cveId": "CVE-2026-16232",
    "datePublished": "2026-07-22T13:53:09.830Z",
    "dateReserved": "2026-07-19T12:14:17.233Z",
    "dateUpdated": "2026-08-10T18:34:01.548Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-24914 (GCVE-0-2024-24914)

Vulnerability from cvelistv5 – Published: 2024-11-07 11:25 – Updated: 2024-11-07 17:33

Summary

Authenticated Gaia users can inject code or commands by global variables through special HTTP requests. A Security fix that mitigates this vulnerability is available.

Severity

8 (High)


                        
                          CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-11-07 16:56 UTC

CWE

CWE-914 - Improper Control of Dynamically-Identified Variables

Assigner

checkpoint mitre root Scorecard

References

1 reference

URL	Tags
https://support.checkpoint.com/results/sk/sk182743

Impacted products

8 products

Vendor	Product	Version
checkpoint	ClusterXL, Multi-Domain Security Management, Quantum Appliances, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Security Management	Affected: Check Point Quantum Gateways versions R81, R81.10, R81.20
checkpoint	clusterxl	Affected: r81 Affected: r81.10 Affected: r81.20 cpe:2.3:a:checkpoint:clusterxl::::::::
checkpoint	multi-domain_management	Affected: r81 Affected: r81.10 Affected: r81.20 cpe:2.3:a:checkpoint:multi-domain_management::::::::
checkpoint	quantum_appliances	Affected: r81 Affected: r81.10 Affected: r81.20 cpe:2.3:a:checkpoint:quantum_appliances::::::::
checkpoint	quantum_maestro	Affected: r81 Affected: r81.10 Affected: r81.20 cpe:2.3:a:checkpoint:quantum_maestro::::::::
checkpoint	quantum_scalable_chassis	Affected: r81 Affected: r81.10 Affected: r81.20 cpe:2.3:a:checkpoint:quantum_scalable_chassis::::::::
checkpoint	quantum_security_gateway	Affected: r81 Affected: r81.10 Affected: r81.20 cpe:2.3:a:checkpoint:quantum_security_gateway::::::::
checkpoint	quantum_security_management	Affected: r81 Affected: r81.10 Affected: r81.20 cpe:2.3:a:checkpoint:quantum_security_management::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:checkpoint:clusterxl:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "clusterxl",
            "vendor": "checkpoint",
            "versions": [
              {
                "status": "affected",
                "version": "r81"
              },
              {
                "status": "affected",
                "version": "r81.10"
              },
              {
                "status": "affected",
                "version": "r81.20"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:checkpoint:multi-domain_management:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "multi-domain_management",
            "vendor": "checkpoint",
            "versions": [
              {
                "status": "affected",
                "version": "r81"
              },
              {
                "status": "affected",
                "version": "r81.10"
              },
              {
                "status": "affected",
                "version": "r81.20"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:checkpoint:quantum_appliances:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "quantum_appliances",
            "vendor": "checkpoint",
            "versions": [
              {
                "status": "affected",
                "version": "r81"
              },
              {
                "status": "affected",
                "version": "r81.10"
              },
              {
                "status": "affected",
                "version": "r81.20"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:checkpoint:quantum_maestro:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "quantum_maestro",
            "vendor": "checkpoint",
            "versions": [
              {
                "status": "affected",
                "version": "r81"
              },
              {
                "status": "affected",
                "version": "r81.10"
              },
              {
                "status": "affected",
                "version": "r81.20"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:checkpoint:quantum_scalable_chassis:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "quantum_scalable_chassis",
            "vendor": "checkpoint",
            "versions": [
              {
                "status": "affected",
                "version": "r81"
              },
              {
                "status": "affected",
                "version": "r81.10"
              },
              {
                "status": "affected",
                "version": "r81.20"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:checkpoint:quantum_security_gateway:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "quantum_security_gateway",
            "vendor": "checkpoint",
            "versions": [
              {
                "status": "affected",
                "version": "r81"
              },
              {
                "status": "affected",
                "version": "r81.10"
              },
              {
                "status": "affected",
                "version": "r81.20"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:checkpoint:quantum_security_management:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "quantum_security_management",
            "vendor": "checkpoint",
            "versions": [
              {
                "status": "affected",
                "version": "r81"
              },
              {
                "status": "affected",
                "version": "r81.10"
              },
              {
                "status": "affected",
                "version": "r81.20"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-24914",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-07T16:56:57.795526Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-07T17:33:31.286Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "ClusterXL, Multi-Domain Security Management, Quantum Appliances, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Security Management",
          "vendor": "checkpoint",
          "versions": [
            {
              "status": "affected",
              "version": "Check Point Quantum Gateways versions R81, R81.10, R81.20"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Authenticated Gaia users can inject code or commands by global variables through special HTTP requests. A Security fix that mitigates this vulnerability is available."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-914",
              "description": "CWE-914: Improper Control of Dynamically-Identified Variables",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-07T11:25:53.238Z",
        "orgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
        "shortName": "checkpoint"
      },
      "references": [
        {
          "url": "https://support.checkpoint.com/results/sk/sk182743"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
    "assignerShortName": "checkpoint",
    "cveId": "CVE-2024-24914",
    "datePublished": "2024-11-07T11:25:53.238Z",
    "dateReserved": "2024-02-01T15:19:26.278Z",
    "dateUpdated": "2024-11-07T17:33:31.286Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

6 vulnerabilities found for quantum_security_management by checkpoint

CVE-2026-93616 (GCVE-0-2026-93616)

CVE-2026-16232 (GCVE-0-2026-16232)

CVE-2024-24914 (GCVE-0-2024-24914)

CVE-2026-93616 (GCVE-0-2026-93616)

CVE-2026-16232 (GCVE-0-2026-16232)

CVE-2024-24914 (GCVE-0-2024-24914)

Find a vulnerability

Search criteria ⓘ Use this form to refine search results. Full-text search supports keyword queries with ranking and filtering. You can combine vendor, product, and sources to narrow results. Enable “Apply ordering” to sort by date instead of relevance.

6 vulnerabilities found for quantum_security_management by checkpoint

CVE-2026-93616 (GCVE-0-2026-93616)

CVE-2026-16232 (GCVE-0-2026-16232)

CVE-2024-24914 (GCVE-0-2024-24914)

CVE-2026-93616 (GCVE-0-2026-93616)

CVE-2026-16232 (GCVE-0-2026-16232)

CVE-2024-24914 (GCVE-0-2024-24914)

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.