What’s Vulnerable › Products

Check Point Quantum Security Gateway vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your Check Point Quantum Security Gateway version is affected

Latest Check Point Quantum Security Gateway vulnerabilities

• CVE-2026-85103 — Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding (CVSS 9.8)
• CVE-2026-62145 — Local Privilege Escalation in Gaia Portal (CVSS 7.5)
• CVE-2026-50752 — Certificate Validation Bypass in VPN Site-to-Site Connections Using IKEv1 (CVSS 7.4)
• CVE-2026-48135 — HTTP service can incorrectly process malformed HTTP requests (CVSS 5.3)
• CVE-2026-48134 — SQL injection issue in UserCheck Portal when DLP Software Blade is active (CVSS 5.6)
• CVE-2026-48133 — Identity Awareness Captive Portal - Unauthenticated Local File Inclusion (CVSS 7.5)
• CVE-2026-48132 — VPN service may restart unexpectedly when processing IKE traffic over NAT-T 4500/UDP (CVSS 8.1)
• CVE-2026-48131 — VPND IKE Fragment Reassembly - Heap Out-of-Bounds Write via Sequence Number Zero (CVSS 8.1)