ZeusQA
Start free

Known exploited vulnerabilities

Check Point vulnerabilities attackers have used

Every Check Point vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 5 Check Point vulnerabilities as exploited in the wild, 4 of them added in the last 12 months and 2 used in ransomware campaigns. The most recent is CVE-2026-93616, added Sep 22, 2026. Multiple Products has the most entries (2).

In KEV, all time
5
Added, last 12 months
4
Used in ransomware
2
New CVEs this week
0

By product

Multiple Products (2), Quantum Security Gateways (1), Security Gateway (1), SmartConsole (1).

Every Check Point entry in CISA KEV

  1. CVE-2026-93616

    Added · due

    Check Point Multiple Products Path Traversal Vulnerability

    Check Point Security Management Server, Multi-Domain Security Management Server, Log Server, Multi-Domain Log Server, and SmartEvent contain a path traversal vulnerability that allows an unauthenticated attacker to upload and execute…

  2. CVE-2026-85102

    Added · due

    Check Point Multiple Products Improper Certificate Validation Vulnerability

    Check Point Security Gateway and Check Point Spark Firewall using Site to Site VPN or Remote Access VPN contain an improper certificate validation vulnerability which could allow an unauthenticated remote attacker to execute arbitrary code…

  3. CVE-2026-16232

    Added · due

    Check Point SmartConsole Improper Authentication Vulnerability

    Check Point SmartConsole contains an improper authentication vulnerability which could allow an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges.

  4. CVE-2026-50751

    RansomwareAdded · due

    Check Point Security Gateway Improper Authentication Vulnerability

    Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a…

  5. CVE-2024-24919

    RansomwareAdded · due

    Check Point Quantum Security Gateways Information Disclosure Vulnerability

    Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access…

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works