CVE-2024-24914

Severity: high (CVSS 8.0 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-11-07 · updated 2026-06-17
Weakness: CWE-914

Description

Authenticated Gaia users can inject code or commands by global variables through special HTTP requests. A Security fix that mitigates this vulnerability is available.

Affected products

checkpoint Gaia Os: r81, r81.10, r81.20

References

https://support.checkpoint.com/results/sk/sk182743

Get alerted when CVE-2024-24914 or the next vulnerability affects your stack