CVE-2026-50751

A logic flow weakness in the certificate validation of the deprecated IKEv1 key exchange allows unauthenticated remote attackers to bypass authentication on Check Point Remote Access VPN, Mobile Access (SSL VPN), and Spark Firewalls. The vulnerability exists because the iked process fails to veri...

CVE-2024-24911

CVE-2024-24911 affects the Check Point Management Server / Domain Management Server cpca process. An Out-of-Bounds read can occur when handling certain HTTP POSTs to TCP port 18264, potentially causing the cpca process to exit and produce a core dump. When cpca is down, VPN and SIC connectivity m...

CVE-2026-85102

Check Point Security Gateway and Spark Firewall are vulnerable to a critical issue (CVSS 9.8 ) caused by improper certificate trust validation during VPN negotiation . An unauthenticated remote attacker can bypass authentication checks to execute arbitrary code on the Gateway. The flaw affects Si...

CVE-2013-7311

CVE-2013-0149 is referenced across multiple vendors in connected sources as an OSPF LSA handling vulnerability where the implementation fails to validate duplicate Link State ID values in LSA packets. This leads to remote DoS (routing disruption) and potential information disclosure through craft...

CVE-2021-30361

The vulnerability CVE-2021-30361 affects the Check Point Gaia Portal GUI Clients, where authenticated administrators with GUI Clients permissions can inject a command that executes on the Gaia OS. The issue stems from an insecure interaction in the GUI Clients feature, enabling local command inje...

CVE-2024-24914

The CVE-2024-24914 issue affects Check Point Gaia Portal (Gaia Platform). Authenticated Gaia users can inject code/commands via global variables in special HTTP requests due to unprotected global variables handling in the TCL process. The vulnerability is mitigated by a security fix, with the pat...