CH
Vendor
Checkpoint
228
CVEs
17
On KEV
0
New 30D
Products
QS9.8
Quantum Security Management
checkpoint
8 CVEs2 on KEV0 new
SG9.8
Security Gateway
Checkpoint
8 CVEs2 on KEV0 new
GO9.8
Gaia OS
Checkpoint
6 CVEs2 on KEV0 new
MS9.8
Multi-Domain Security Management
checkpoint
3 CVEs2 on KEV0 new
GE9.8
Gaia Embedded
Checkpoint
2 CVEs2 on KEV0 new
QS8.6
Quantum Security Gateway Firmware
Checkpoint
2 CVEs1 on KEV0 new
SF9.3
Spark Firewalls
checkpoint
2 CVEs1 on KEV0 new
CP8.6
Check Point Quantum Gateway, Spark Gateway and CloudGuard Network
checkpoint
1 CVEs1 on KEV0 new
CN8.6
Cloudguard Network
Checkpoint
1 CVEs1 on KEV0 new
CN8.6
Cloudguard Network Security
Checkpoint
1 CVEs1 on KEV0 new
QS8.6
Quantum Spark Appliances
Checkpoint
1 CVEs1 on KEV0 new
QS8.6
Quantum Spark Firmware
Checkpoint
1 CVEs1 on KEV0 new
FI7.5
Firewall-1
Checkpoint
43 CVEs0 on KEV0 new
ES7.8
Endpoint Security
Checkpoint
14 CVEs0 on KEV0 new
VP7.5
Vpn-1
Checkpoint
14 CVEs0 on KEV0 new
ZO8.8
Zonealarm
Checkpoint
14 CVEs0 on KEV0 new
CN–
Connectra Ngx
Checkpoint
4 CVEs0 on KEV0 new
IA8.1
Identity Agent
checkpoint
4 CVEs0 on KEV0 new
PR7.5
Provider-1
Checkpoint
4 CVEs0 on KEV0 new
RA9.8
Remote Access Clients
Checkpoint
4 CVEs0 on KEV0 new
CP5.4
Check Point Mobile Access
checkpoint
3 CVEs0 on KEV0 new
ES9.8
Endpoint Security Clients
Checkpoint
3 CVEs0 on KEV0 new
HE7.8
Harmony Endpoint.
checkpoint
3 CVEs0 on KEV0 new
MA5.4
Mobile Access
Checkpoint
3 CVEs0 on KEV0 new
RA5.4
Remote Access Vpn
Checkpoint
3 CVEs0 on KEV0 new
SM7.8
Smartconsole
Checkpoint
3 CVEs0 on KEV0 new
ZE8.8
Zonealarm Extreme Security
Checkpoint
3 CVEs0 on KEV0 new
CD9.8
Capsule Docs Standalone Client
Checkpoint
2 CVEs0 on KEV0 new
CP7.8
Check Point SmartConsole
checkpoint
2 CVEs0 on KEV0 new
GP7.2
Gaia Portal
Checkpoint
2 CVEs0 on KEV0 new
NG–
Next Generation
Checkpoint
2 CVEs0 on KEV0 new
SN7.5
Ssl Network Extender
Checkpoint
2 CVEs0 on KEV0 new
VF–
Vpn-1 Firewall-1
Checkpoint
2 CVEs0 on KEV0 new
VS7.8
Vpn-1 Secureclient
Checkpoint
2 CVEs0 on KEV0 new
ZE7.8
Zonealarm Extreme Security Nextgen
Checkpoint
2 CVEs0 on KEV0 new
CD4.4
Capsule Docs
Checkpoint
1 CVEs0 on KEV0 new
CW7.5
Capsule Workspace
Checkpoint
1 CVEs0 on KEV0 new
CP–
Check Point
Checkpoint
1 CVEs0 on KEV0 new
CP9.8
Check Point Harmony SASE
checkpoint
1 CVEs0 on KEV0 new
CP–
Check Point Integrity Client
Checkpoint
1 CVEs0 on KEV0 new
CP5.3
Check Point Management Log Server
checkpoint
1 CVEs0 on KEV0 new
CP–
Check Point Vpn
Checkpoint
1 CVEs0 on KEV0 new
CP–
Check Point Vpn-1 Pro
Checkpoint
1 CVEs0 on KEV0 new
CL8.0
Clusterxl
Checkpoint
1 CVEs0 on KEV0 new
CM8.0
ClusterXL, Multi-Domain Security Management, Quantum Appliances, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Security Management
checkpoint
1 CVEs0 on KEV0 new
EC–
Endpoint Connect
Checkpoint
1 CVEs0 on KEV0 new
ES–
Endpoint Security MI Server R73
Checkpoint
1 CVEs0 on KEV0 new
ES9.8
Endpoint Security Server Package
Checkpoint
1 CVEs0 on KEV0 new
ES–
Endpoint Security Vpn
Checkpoint
1 CVEs0 on KEV0 new
EX–
Express
Checkpoint
1 CVEs0 on KEV0 new
FP–
Firewall-1 Pki Web Service
Checkpoint
1 CVEs0 on KEV0 new
HB7.8
Harmony Browse
Checkpoint
1 CVEs0 on KEV0 new
HE6.7
Harmony Endpoint Security Client for Windows
checkpoint
1 CVEs0 on KEV0 new
HS9.8
Harmony Sase
Checkpoint
1 CVEs0 on KEV0 new
HS7.5
Hramony SASE
checkpoint
1 CVEs0 on KEV0 new
IM6.4
Ica Management Portal
Checkpoint
1 CVEs0 on KEV0 new
IA6.5
Identity Awareness
checkpoint
1 CVEs0 on KEV0 new
IV5.9
Ipsec Vpn
Checkpoint
1 CVEs0 on KEV0 new
IO–
Ipso OS
Checkpoint
1 CVEs0 on KEV0 new
JH9.8
Jumbo Hotfix For Endpoint Security Server
Checkpoint
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-93616 In wildKEV | QS Quantum Security Management checkpoint | 9.8 | Sep 22 | Directory Traversal and File upload allows execution of arbitrary script on the Management Server |
| CVE-2026-91843 | QS Quantum Security Management checkpoint | 9.8 | Sep 16 | Stack overflow in login process to the Security Management and Log Servers |
| CVE-2026-85103 | QS Quantum Security Management checkpoint | 9.8 | Sep 9 | Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding |
| CVE-2026-85102 In wildKEV | GE Gaia Embedded Checkpoint | 9.8 | Sep 9 | Improper Certificate Validation in Quantum Security Gateway |
| CVE-2026-18574 | MS Multi-Domain Security Management Server checkpoint | 9.3 | Aug 3 | Authentication Bypass in Check Point Security Management Server |
| CVE-2026-62145 | QS Quantum Security Management checkpoint | 7.5 | Jul 22 | Local Privilege Escalation in Gaia Portal |
| CVE-2026-62144 | MS Multi-Domain Security Management checkpoint | 9.1 | Jul 22 | Management Authentication Bypass and Privilege Escalation |
| CVE-2026-16232 In wildKEV | MS Multi-Domain Security Management checkpoint | 9.8 | Jul 22 | Authentication Bypass in the SmartConsole Login Process Using an Application Token |
| CVE-2026-10847 | IA Identity Agent checkpoint | 7.8 | Jun 11 | Local Privilege Escalation vulnerability in Check Point Identity Agent Full for Windows OS |
| CVE-2026-50751 RansomwareIn wildKEV | SF Spark Firewalls checkpoint | 9.3 | Jun 8 | User Authentication Bypass in VPN Remote Access and Mobile Access |
| CVE-2026-50752 | SF Spark Firewalls checkpoint | 7.4 | Jun 8 | Certificate Validation Bypass in VPN Site-to-Site Connections Using IKEv1 |
| CVE-2026-48136 | QS Quantum Security Management checkpoint | 4.1 | May 26 | Authenticated Administrator Role-Based Access Control Bypass in Compliance |
| CVE-2025-9142 | HS Hramony SASE checkpoint | 7.5 | Jan 14 | Local privilege escalation in Harmony SASE Windows Agent |
| CVE-2025-8305 | IA Identity Awareness checkpoint | 6.5 | Dec 22 | Information Disclosure in Identity Agent Debug Files |
| CVE-2025-8304 | IA Identity Agent checkpoint | 6.5 | Dec 22 | Information Disclosure in Identity Agent Registry Keys |
| CVE-2025-3831 | CP Check Point Harmony SASE checkpoint | 9.8 | Aug 12 | Exposed SFTP server |
| CVE-2024-52885 | CP Check Point Mobile Access checkpoint | 5.4 | Aug 6 | Path Traversal |
| CVE-2025-2028 | CP Check Point Management Log Server checkpoint | 5.3 | Aug 6 | Lack of TLS validation |
| CVE-2024-24915 | CP Check Point SmartConsole checkpoint | 7.2 | Jun 29 | SmartConsole Sensitive Credential Exposure via Memory Dump |
| CVE-2024-24916 | CP Check Point SmartConsole checkpoint | 7.8 | Jun 19 | DLL-HiJacking |
| CVE-2024-52888 | CP Check Point Mobile Access checkpoint | 5.4 | Apr 27 | For an authenticated end-user the portal may run a script while attempting to display a directory or some file's properties. |
| CVE-2024-52887 | CP Check Point Mobile Access checkpoint | 5.4 | Apr 27 | Authenticated end-user may set a specially crafted SNX bookmark that can make their browser run a script while accessing their own bookmark list. |
| CVE-2024-24911 | MS Multi-Domain Security Management, Quantum Security Management checkpoint | 7.5 | Feb 6 | Out of Bounds read in the CPCA process on Check Point Management Server |
| CVE-2024-6233 | ZE Zonealarm Extreme Security Nextgen Checkpoint | 7.8 | Nov 22 | Check Point ZoneAlarm Extreme Security Link Following Local Privilege Escalation Vulnerability |
| CVE-2024-24914 | CM ClusterXL, Multi-Domain Security Management, Quantum Appliances, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Security Management checkpoint | 8.0 | Nov 7 | Authenticated Gaia users can inject code or commands by global variables through special HTTP requests |
| CVE-2024-24919 RansomwareIn wildKEV | CP Check Point Quantum Gateway, Spark Gateway and CloudGuard Network checkpoint | 8.6 | May 28 | Information disclosure |
| CVE-2024-24912 | HE Harmony Endpoint Security Client for Windows checkpoint | 6.7 | May 1 | Local privilege escalation in Harmony Endpoint Security Client for Windows via crafted DLL file |
| CVE-2024-24910 | ZO ZoneAlarmExtremeSecurityNextGen,IdentityAgentforWindows,IdentityAgentforWindowsTerminalServer checkpoint | 7.3 | Apr 18 | LocalprivilegeescalationinCheckPointZoneAlarmExtremeSecurityNextGen,IdentityAgentforWindows,andIdentityAgentforWindowsTerminalServerviacraftedDLLfile |
| CVE-2023-28134 | HE Harmony Endpoint. checkpoint | 7.8 | Nov 12 | Local Privliege Escalation in Check Point Endpoint Security Remediation Service |
| CVE-2023-28130 | GP Gaia Portal Checkpoint | 7.2 | Jul 26 | Local user may lead to privilege escalation using Gaia Portal hostnames page |
| CVE-2023-28133 | ES Endpoint Security Checkpoint | 7.8 | Jul 23 | Local privilege escalation in Check Point Endpoint Security Client (version E87.30) via crafted OpenSSL configuration file |
| CVE-2022-23746 | SN Ssl Network Extender Checkpoint | 7.5 | Nov 30 | The IPsec VPN blade has a dedicated portal for downloading and connecting through SSL Network Extender (SNX) |
| CVE-2022-41604 | ZO Zonealarm Checkpoint | 8.8 | Sep 27 | Check Point ZoneAlarm Extreme Security before 15.8.211.19229 allows local users to escalate privileges |
| CVE-2022-23745 | CW Capsule Workspace Checkpoint | 7.5 | Jul 18 | A potential memory corruption issue was found in Capsule Workspace Android app (running on GrapheneOS) |
| CVE-2022-23744 | ES Endpoint Security Checkpoint | 2.3 | Jul 7 | Check Point Endpoint before version E86.50 failed to protect against specific registry change which allowed to disable endpoint protection by a local administrator |
| CVE-2022-23742 | ES Endpoint Security Checkpoint | 7.8 | May 12 | Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low privileges |
| CVE-2021-30361 | GP Gaia Portal Checkpoint | 6.7 | May 11 | The Check Point Gaia Portal's GUI Clients allowed authenticated administrators with permission for the GUI Clients settings to inject a command that would run on the Gaia OS |
| CVE-2022-23743 | ZO Zonealarm Checkpoint | 7.8 | May 11 | Check Point ZoneAlarm before version 15.8.200.19118 allows a local actor to escalate privileges during the upgrade process |
| CVE-2021-30360 | ES Endpoint Security Checkpoint | 7.8 | Jan 10 | Users have access to the directory where the installation repair occurs |
| CVE-2021-30359 | HB Harmony Browse Checkpoint | 7.8 | Oct 22 | The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to execute some steps during the installation |
| CVE-2021-30358 | MA Mobile Access Portal Agent Checkpoint | 7.2 | Oct 19 | Mobile Access Portal Native Applications who's path is defined by the administrator with environment variables may run applications from other locations by the Mobile Access… |
| CVE-2021-30357 | SN Ssl Network Extender Checkpoint | 5.3 | Jun 8 | SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the configuration file supplied, which allows partially disclosing files to which the… |
| CVE-2021-30356 | IA Identity Agent Checkpoint | 8.1 | Apr 22 | A denial of service vulnerability was reported in Check Point Identity Agent before R81.018.0000, which could allow low privileged users to overwrite protected system files |
| CVE-2021-3449 | QS Quantum Security Management Firmware Checkpoint | 5.9 | Mar 25 | NULL pointer deref in signature_algorithms processing |
| CVE-2020-6024 | SM Smartconsole Checkpoint | 7.8 | Jan 20 | Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and R81 before Build 548 were vulnerable to a possible local… |
| CVE-2020-6021 | ES Endpoint Security Checkpoint | 7.8 | Dec 3 | Check Point Endpoint Security Client for Windows before version E84.20 allows write access to the directory from which the installation repair takes place |
| CVE-2020-6015 | ES Endpoint Security Checkpoint | 5.5 | Nov 5 | Check Point Endpoint Security for Windows before E84.10 can reach denial of service during clean install of the client which will prevent the storage of service log files in… |
| CVE-2020-6014 | ES Endpoint Security Checkpoint | 6.5 | Nov 2 | Check Point Endpoint Security Client for Windows, with Anti-Bot or Threat Emulation blades installed, before version E83.20, tries to load a non-existent DLL during a query for… |
| CVE-2020-6023 | ZO Zonealarm Checkpoint | 7.8 | Oct 27 | Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to escalate privileges while restoring files in Anti-Ransomware |
| CVE-2020-6022 | ZO Zonealarm Checkpoint | 5.5 | Oct 27 | Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to delete arbitrary files while restoring files in Anti-Ransomware |
| CVE-2020-6020 | IM Ica Management Portal Checkpoint | 6.4 | Sep 24 | Check Point Security Management's Internal CA web management before Jumbo HFAs R80.10 Take 278, R80.20 Take 160, R80.30 Take 210, and R80.40 Take 38, can be manipulated to run… |
| CVE-2020-6012 | ZA Zonealarm Anti-ransomware Checkpoint | 7.4 | Aug 4 | ZoneAlarm Anti-Ransomware before version 1.0.713 copies files for the report from a directory with low privileges |
| CVE-2020-6013 | ZE Zonealarm Extreme Security Checkpoint | 8.8 | Jul 6 | ZoneAlarm Firewall and Antivirus products before version 15.8.109.18436 allow an attacker who already has access to the system to execute code at elevated privileges through a… |
| CVE-2019-8463 | ES Endpoint Security Clients Checkpoint | 7.5 | Dec 23 | A denial of service vulnerability was reported in Check Point Endpoint Security Client for Windows before E82.10, that could allow service log file to be written to non-standard… |
| CVE-2019-8462 | SG Security Gateway Checkpoint | 7.5 | Oct 2 | In a rare scenario, Check Point R80.30 Security Gateway before JHF Take 50 managed by Check Point R80.30 Management crashes with a unique configuration of enhanced logging |
| CVE-2019-8461 | CD Capsule Docs Standalone Client Checkpoint | 7.8 | Aug 29 | Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH location on a clean image without Endpoint Client installed |
| CVE-2019-8459 | ES Endpoint Security Clients Checkpoint | 9.8 | Jun 20 | Check Point Endpoint Security Client for Windows, with the VPN blade, before version E80.83, starts a process without using quotes in the path |
| CVE-2019-8458 | ES Endpoint Security Clients Checkpoint | 4.4 | Jun 20 | Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before version E81.00, tries to load a non-existent DLL during an update initiated by the UI |
| CVE-2019-8454 | ES Endpoint Security Checkpoint | 7.0 | Apr 29 | A local attacker can create a hard-link between a file to which the Check Point Endpoint Security client for Windows before E80.96 writes and another BAT file, then by… |
| CVE-2019-8452 | ZO Zonealarm Checkpoint | 7.8 | Apr 22 | A hard-link created from log file archive of Check Point ZoneAlarm up to 15.4.062 or Check Point Endpoint Security client for Windows before E80.96 to any file on the system will… |