Vendor
Check Point
5 of 7 Check Point CVEs in Patchfirst (71%) are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it. of vulnerabilities exploited in the wild, 2 of them used by ransomware.
- CVEs
- 7
- In CISA KEV
- 571%
- Known ransomware use
- 2
- Median days to KEV
- 0
- from publication
- Latest KEV listing
- 22 Sep 2026
Products
In KEVOther CVEs
- Multiple Products In KEV: 2 CVEs: 2
- Quantum Security Gateways In KEV: 1 CVEs: 1
- Security Gateway In KEV: 1 CVEs: 1
- SmartConsole In KEV: 1 CVEs: 1
- Quantum Security Gateway In KEV: 0 CVEs: 2
Top ATT&CK techniques
What attackers do with Check Point CVEs- T1190Exploit Public-Facing Application CVEs: 3
- T1078Valid Accounts CVEs: 2
- T1059Command and Scripting Interpreter CVEs: 2
- T1133External Remote Services CVEs: 1
- T1202Indirect Command Execution CVEs: 1
Counts are Check Point CVEs linked to the technique. Each link’s provenance is on the CVE page.
Check Point CVEs
7 CVEs, by priority- CVE-2026-50751Check Point Security Gateway Improper Authentication VulnerabilityCheck Point · Security GatewayKEVRansomwarePublic exploitCritical · 9.3T1133External Remote ServicesT1078Valid Accounts85.3%Top 0.28%84.5priority
- CVE-2026-50752Certificate Validation Bypass in VPN Site-to-Site Connections Using IKEv1checkpoint · Quantum Security GatewayHigh · 7.45.0%Top 7.8%81.5priority
- CVE-2026-93616Check Point Multiple Products Path Traversal VulnerabilityCheck Point · Multiple ProductsKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter91.6%Top 0.19%79.8priority
- CVE-2026-85102Check Point Multiple Products Improper Certificate Validation VulnerabilityCheck Point · Multiple ProductsKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter54.1%Top 0.99%79.7priority
- CVE-2024-24919Check Point Quantum Security Gateways Information Disclosure VulnerabilityCheck Point · Quantum Security GatewaysKEVRansomwarePublic exploitHigh · 8.6T1059.004Unix ShellT1202Indirect Command Execution+3 more>99.9%Top 0.02%79.0priority
- CVE-2026-16232Check Point SmartConsole Improper Authentication VulnerabilityCheck Point · SmartConsoleKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts1 report3.5%Top 11%76.6priority
- CVE-2026-85103Heap-based Buffer Overflow in VPN Certificate ASN.1 Decodingcheckpoint · Quantum Security GatewayCritical · 9.84.3%Top 8.9%28.0priority