Vulnerabilidades em checkpoint
29 resultadosAnálise Vexday
Checkpoint tem 28 vulnerabilidades catalogadas na base, com 12 publicadas nos últimos 90 dias e 3 já sob ataque ativo. A fraqueza predominante é exposição de informações sensíveis (CWE-200), apesar de apenas 3 vulnerabilidades críticas, indicando risco moderado mas com exploração confirmada em operações.
CVE-2024-24919HIGHInformation disclosureEPSS 100.0%KEVCVE-2026-50751CRITICALUser Authentication Bypass in VPN Remote Access and Mobile AccessEPSS 82.6%KEVCVE-2026-16232CRITICALAuthentication Bypass in the SmartConsole Login Process Using an Application TokenEPSS 71.4%KEVCVE-2026-62144CRITICALManagement Authentication Bypass and Privilege EscalationEPSS 20.6%CVE-2026-62145HIGHLocal Privilege Escalation in Gaia PortalEPSS 7.5%CVE-2026-48133HIGHIdentity Awareness Captive Portal - Unauthenticated Local File InclusionEPSS 4.8%CVE-2026-50752HIGHCertificate Validation Bypass in VPN Site-to-Site Connections Using IKEv1EPSS 4.5%CVE-2026-48134MEDIUMSQL injection issue in UserCheck Portal when DLP Software Blade is activeEPSS 4.4%CVE-2026-48136MEDIUMAuthenticated Administrator Role-Based Access Control Bypass in ComplianceEPSS 4.1%CVE-2026-48131HIGHVPND IKE Fragment Reassembly - Heap Out-of-Bounds Write via Sequence Number ZeroEPSS 2.7%CVE-2026-48135MEDIUMHTTP service can incorrectly process malformed HTTP requestsEPSS 2.6%CVE-2026-48132HIGHVPN service may restart unexpectedly when processing IKE traffic over NAT-T 4500/UDPEPSS 2.1%CVE-2024-24916MEDIUMDLL-HiJackingEPSS 2.1%CVE-2026-18574CRITICALAuthentication Bypass in Check Point Security Management ServerEPSS 1.0%CVE-2024-52885MEDIUMPath TraversalEPSS 0.5%CVE-2025-3831HIGHExposed SFTP serverEPSS 0.4%CVE-2024-24914HIGHAuthenticated Gaia users can inject code or commands by global variables through special HTTP requests. A Security fix that mitigates this vEPSS 0.4%CVE-2024-24911MEDIUMOut of Bounds read in the CPCA process on Check Point Management ServerEPSS 0.4%CVE-2023-28134HIGHLocal Privliege Escalation in Check Point Endpoint Security Remediation ServiceEPSS 0.2%CVE-2025-2028MEDIUMLack of TLS validationEPSS 0.2%