C
Vendor security profile5 actively exploited CVEs
checkpoint
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs9
Critical7
CISA KEV5
Public exploit5
Patch rate%67
Avg. CVSS9.1
12-month vulnerability rate
0
0
0
0
0
0
0
1
1
1
4
0
CVE KEV
CVE severity distribution
9toplam CVE
Critical7 (78%)
High1 (11%)
Medium1 (11%)
Patch and exploitation view
%67
Verified patch
%56
CISA KEV
%56
Public exploit
6Patch available
0Partial
0Workaround
0Vendor: no patch
3Unknown
Latest vulnerabilities
9.8
CVE-2026-93616 Actively exploited
Directory Traversal and File upload allows execution of arbitrary script on the Management Server
C
Patch verifiedEPSS %20
9.8
CVE-2026-91843
Stack overflow in login process to the Security Management and Log Servers
C
Patch status unknownEPSS %1
9.8
CVE-2026-85103
Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding
C
Patch status unknownEPSS %4
9.8
CVE-2026-85102 Actively exploited
Improper Certificate Validation in Quantum Security Gateway
C
Patch verifiedEPSS %8
9.3
CVE-2026-18574
Authentication Bypass in Check Point Security Management Server
C
Patch status unknownEPSS %1
9.3
CVE-2026-16232 Actively exploited
Authentication Bypass in the SmartConsole Login Process Using an Application Token
C
Patch verifiedEPSS %78
9.3
CVE-2026-50751 Actively exploited
User Authentication Bypass in VPN Remote Access and Mobile Access
C
Patch verifiedEPSS %85
8.6
CVE-2024-24919 Actively exploited
Information disclosure
C
Patch verifiedEPSS %100
5.9
CVE-2021-3449
NULL pointer deref in signature_algorithms processing
O
Patch verifiedEPSS %64