Quantum Security Gateway
Approved changes feed: RSS · Atom
cpe:2.3:a:checkpoint:quantum_security_gateway:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Checkpoint (963cc759-0773-5380-992a-923d56af82ce) |
|---|---|
| Product | Quantum Security Gateway (8b1a1177-b90f-5f58-8431-462b4f124568) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-62145 |
vulnerable | 2026-07-29 01:06:18.968679 |
Local Privilege Escalation in Gaia Portal
HIGH (7.5)
A vulnerability in Check Point Gaia Portal allows an authenticated attacker with read-only Gaia Portal privileges to execute commands with root privileges.
Published: 2026-07-22T13:53:53.656Z
Updated: 2026-07-24T03:56:05.075Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-50752 |
vulnerable | 2026-07-29 00:57:48.845121 |
Certificate Validation Bypass in VPN Site-to-Site Connections Using IKEv1
HIGH (7.4)
A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an unauthenticated attacker positioned as a man-in-the-middle to bypass certificate validation in VPN site-to-site connections that use certificate-based authentication. Successful exploitation could allow interception or modification of traffic traversing the VPN tunnel.
Published: 2026-06-08T11:00:38.563Z
Updated: 2026-06-10T13:36:24.946Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-50751 |
vulnerable | 2026-07-29 00:57:48.840591 |
User Authentication Bypass in VPN Remote Access and Mobile Access
A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.
Published: 2026-06-08T11:07:15.746Z
Updated: 2026-06-10T13:37:27.725Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48135 |
vulnerable | 2026-06-08 08:05:12.254193 |
HTTP service can incorrectly process malformed HTTP requests
MEDIUM (5.3)
A Check Point HTTP-based service can incorrectly handle malformed HTTP requests.
The issue is related to HTTP request parsing and validation.
Published: 2026-05-26T12:57:19.074Z
Updated: 2026-05-27T18:36:10.600Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48134 |
vulnerable | 2026-06-08 08:05:12.254057 |
SQL injection issue in UserCheck Portal when DLP Software Blade is active
MEDIUM (5.6)
When the DLP is active, the UserCheck Web Portal contains an input-handling issue in the UserChoice flow. Under specific conditions, an attacker who can access the UserCheck Ask page could attempt to manipulate the Security Gateway's stored DLP/UserCheck incident information. This could lead to disruptions such as loss of stored incident entries, incorrect handling of pending approvals, or resource impact if the issue is abused repeatedly.
Exposure is reduced if the UserCheck Portal is not accessible from untrusted networks.
Published: 2026-05-26T12:57:07.767Z
Updated: 2026-06-02T14:15:31.285Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48133 |
vulnerable | 2026-06-08 08:05:12.253833 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48132 |
vulnerable | 2026-06-08 08:05:12.253456 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48131 |
vulnerable | 2026-06-08 08:05:12.253225 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-24914 |
vulnerable | 2026-06-08 06:29:42.014542 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.