Quantum Security Management
Approved changes feed: RSS · Atom
cpe:2.3:a:checkpoint:quantum_security_management:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Checkpoint (963cc759-0773-5380-992a-923d56af82ce) |
|---|---|
| Product | Quantum Security Management (d08ce255-babe-5840-b4f8-201808b6bdc8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-62145 |
vulnerable | 2026-07-29 01:06:18.968867 |
Local Privilege Escalation in Gaia Portal
HIGH (7.5)
A vulnerability in Check Point Gaia Portal allows an authenticated attacker with read-only Gaia Portal privileges to execute commands with root privileges.
Published: 2026-07-22T13:53:53.656Z
Updated: 2026-07-24T03:56:05.075Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-62144 |
vulnerable | 2026-07-29 01:06:18.966211 |
Management Authentication Bypass and Privilege Escalation
An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security Gateways. Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients.
Published: 2026-07-22T13:53:35.969Z
Updated: 2026-07-24T03:56:14.016Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-16232 |
vulnerable | 2026-07-29 00:26:18.613866 |
Authentication Bypass in the SmartConsole Login Process Using an Application Token
An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers.
Published: 2026-07-22T13:53:09.830Z
Updated: 2026-07-23T03:55:51.269Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48136 |
vulnerable | 2026-06-08 08:05:12.255762 |
Authenticated Administrator Role-Based Access Control Bypass in Compliance
MEDIUM (4.1)
When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain (CMA) can modify stored metadata associated with Compliance Best Practices in another Management Domain, where the administrator has no access permissions, bypassing Role-Based Access Control (RBAC).
Published: 2026-05-26T12:57:29.298Z
Updated: 2026-06-02T14:17:00.827Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-24914 |
vulnerable | 2026-06-08 06:29:42.015156 |
Details available
HIGH (8)
Authenticated Gaia users can inject code or commands by global variables through special HTTP requests. A Security fix that mitigates this vulnerability is available.
Published: 2024-11-07T11:25:53.238Z
Updated: 2024-11-07T17:33:31.286Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.