Quantum Security Gateway
Approved changes feed: RSS · Atom
cpe:2.3:a:checkpoint:quantum_security_gateway:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Checkpoint (963cc759-0773-5380-992a-923d56af82ce) |
|---|---|
| Product | Quantum Security Gateway (8b1a1177-b90f-5f58-8431-462b4f124568) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-85102 |
vulnerable | 2026-09-16 04:33:08.128320 |
Improper Certificate Validation in Quantum Security Gateway
CRITICAL (9.8)
Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.
Published: 2026-09-09T13:00:31.206Z
Updated: 2026-09-23T03:55:34.599Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-85103 |
vulnerable | 2026-09-16 04:33:08.007617 |
Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding
CRITICAL (9.8)
A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.
Published: 2026-09-09T13:00:42.088Z
Updated: 2026-09-10T03:56:41.934Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-62145 |
vulnerable | 2026-07-29 01:06:18.968679 |
Local Privilege Escalation in Gaia Portal
HIGH (7.5)
A vulnerability in Check Point Gaia Portal allows an authenticated attacker with read-only Gaia Portal privileges to execute commands with root privileges.
Published: 2026-07-22T13:53:53.656Z
Updated: 2026-07-24T03:56:05.075Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-50752 |
vulnerable | 2026-07-29 00:57:48.845121 |
Certificate Validation Bypass in VPN Site-to-Site Connections Using IKEv1
HIGH (7.4)
A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an unauthenticated attacker positioned as a man-in-the-middle to bypass certificate validation in VPN site-to-site connections that use certificate-based authentication. Successful exploitation could allow interception or modification of traffic traversing the VPN tunnel.
Published: 2026-06-08T11:00:38.563Z
Updated: 2026-06-10T13:36:24.946Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-50751 |
vulnerable | 2026-07-29 00:57:48.840591 |
User Authentication Bypass in VPN Remote Access and Mobile Access
A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.
Published: 2026-06-08T11:07:15.746Z
Updated: 2026-08-04T03:56:11.310Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48135 |
vulnerable | 2026-06-08 08:05:12.254193 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48134 |
vulnerable | 2026-06-08 08:05:12.254057 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48133 |
vulnerable | 2026-06-08 08:05:12.253833 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48132 |
vulnerable | 2026-06-08 08:05:12.253456 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48131 |
vulnerable | 2026-06-08 08:05:12.253225 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-24914 |
vulnerable | 2026-06-08 06:29:42.014542 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.