MEIFP – Most Exploited Internet-Facing Products

checkpoint

Products: Check Point Quantum Gateway, Spark Gateway and CloudGuard Network · Multi-Domain Security Management · Quantum Security Gateway · Quantum Security Management · Spark Firewalls

202.8

Score

CVEs

Active

PoC

KEV

#13

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2026-93616	2026-09-22	9.8v3.1	ACTIVE	Low	None	YES	40.6	Quantum Security Management	A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.
CVE-2026-85102	2026-09-09	9.8v3.1	ACTIVE	Low	None	YES	40.6	Quantum Security Gateway	Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.
CVE-2026-16232	2026-07-22	9.3v4.0	ACTIVE	Low	None	YES	40.6	Multi-Domain Security ManagementQuantum Security Management	An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies
CVE-2026-50751	2026-06-08	9.3v3.1	ACTIVE	Low	None	YES	40.6	Quantum Security GatewaySpark Firewalls	A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.
CVE-2024-24919	2024-05-28	8.6v3.1	ACTIVE	Low	None	YES	40.6	Check Point Quantum Gateway, Spark Gateway and CloudGuard Network	Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3