Check Point vulnerabilities
Security advisories and exploitation reports covering Check Point SmartConsole, firewall appliances, and security gateways — management-plane compromises, policy manipulation, and edge-device vulnerabilities.
We track 7 Check Point CVEs, 5 of them on CISA's Known Exploited Vulnerabilities catalog (2 flagged for ransomware use). The latest KEV addition is CVE-2026-93616, added .
- CVEs tracked
- 7
- On CISA KEV
- 5
- Ransomware use
- 2
- Rated critical
- 6
Latest Check Point coverage
Our reporting filed under Check Point, plus any story that cites one of its CVEs.
InfraTrust: Network Management Systems Under Attack
InfraTrust's September report finds attackers targeting network management and control infrastructure at or before patch availability. Here's what to prioritize.
Check Point Patches Management Server Zero-Day
CVE-2026-93616: CVSS 9.8 Check Point Management Server flaw allows unauth script execution via path traversal. Added to CISA KEV with a Sept. 25 deadline.
CVE-2026-91843: Check Point Management Server RCE
A stack overflow in the Check Point Security Management Server login handler allows unauthenticated RCE as root. CVSS 9.8. Patch available via sk1000155.
Japan Digital Agency Breach Exposes 246K Staff Records
Japan's Digital Agency disclosed a VPN breach affecting roughly 246,000 rows of government employee personal information. The specific CVE and VPN vendor have not been named.
Dutch NCSC Warns Check Point VPN Exploitation Imminent
Dutch NCSC warns exploitation of two CVSS 9.8 Check Point VPN RCE flaws is imminent. If you haven't patched CVE-2026-85102 and CVE-2026-85103, do it now.
Check Point Patches Two CVSS 9.8 VPN RCE Flaws
CVE-2026-85102 and CVE-2026-85103 allow unauthenticated RCE via VPN certificate handling in Check Point firewall products. Patches are out now.
Known exploited Check Point vulnerabilities
| CVE / Vulnerability | Severity | CVSS | EPSS | Added to KEV | Patch by |
|---|---|---|---|---|---|
| CVE-2026-93616 Check Point Multiple Products Path Traversal Vulnerabilitywrite-up | [ CRITICAL ] | 9.8 | 91.6% | ||
| CVE-2026-85102 Unauthenticated RCE via VPN certificate handling in Check Point productswrite-up | [ CRITICAL ] | 9.8 | 54.1% | ||
| CVE-2026-16232 Check Point SmartConsole improper authenticationwrite-up | [ CRITICAL ] | 9.1 | 3.5% | ||
| CVE-2026-50751 Check Point Security Gateway Improper Authentication Vulnerabilityransomware use | [ CRITICAL ] | 9.3 | 85.3% | ||
| CVE-2024-24919 Check Point Quantum Security Gateways Information Disclosure Vulnerabilityransomware use | [ HIGH ] | 8.6 | 100.0% |
Every Check Point CVE on CISA's KEV catalog that we hold, newest KEV addition first. "Patch by" is CISA's BOD 22-01 deadline for US federal agencies, a useful priority signal for everyone else.
Other Check Point CVEs we track
| CVE / Vulnerability | Severity | CVSS | EPSS | Added to KEV |
|---|---|---|---|---|
| CVE-2026-91843 Stack overflow in login handler allows unauthenticated RCE as rootwrite-up | [ CRITICAL ] | 9.8 | 0.5% | — |
| CVE-2026-85103 Unauthenticated RCE via VPN certificate handling in Check Point productswrite-up | [ CRITICAL ] | 9.8 | 4.3% | — |
Not on CISA KEV as of our last sync. Severity and CVSS as stated by NVD or the vendor; EPSS from FIRST.org.
Machine-readable: /api/v1/vendors/check-point.json.
Every CVE row links to its record with the CISA required action, catalog coverage and primary sources. We describe impact and remediation only; no exploit code. See the full KEV tracker, the vendor scorecard, or all vendors.