Description
Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected products
- checkpoint / gaia_embeddedr82.00.10 – r82.00.10
- checkpoint / gaia_embeddedr82.00.10 – r82.00.10
- checkpoint / gaia_embeddedr82.00.10 – r82.00.10
- checkpoint / gaia_embeddedr81.10.00 – r81.10.17
- checkpoint / gaia_embeddedr81.10.17 – r81.10.17
- checkpoint / gaia_embeddedr81.10.17 – r81.10.17
- checkpoint / gaia_embeddedr81.10.17 – r81.10.17
- checkpoint / gaia_embeddedr81.10.17 – r81.10.17
- checkpoint / gaia_embeddedr81.10.17 – r81.10.17
- checkpoint / gaia_embeddedr81.10.17 – r81.10.17
- checkpoint / gaia_embeddedr81.10.17 – r81.10.17
- checkpoint / gaia_embeddedr81.10.17 – r81.10.17
- checkpoint / gaia_embeddedr81.10.17 – r81.10.17
- checkpoint / gaia_embeddedr82.00.10 – r82.00.10
- checkpoint / gaia_embeddedr82.00.10 – r82.00.10
- checkpoint / gaia_embeddedr82.00.10 – r82.00.10
- checkpoint / gaia_embeddedr82.00.10 – r82.00.10
- checkpoint / gaia_embeddedr82.00.10 – r82.00.10
- checkpoint / gaia_embeddedr82.00.10 – r82.00.10
- checkpoint / gaia_embeddedr82.00.10 – r82.00.10
- checkpoint / gaia_osr82.10 – r82.10
- checkpoint / gaia_osr82.10 – r82.10
- checkpoint / gaia_osr82.10 – r82.10
- checkpoint / gaia_osr82.10 – r82.10
- checkpoint / gaia_osr80 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.10 – r81.10
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr81.20 – r81.20
- checkpoint / gaia_osr82 – r82
- checkpoint / gaia_osr82 – r82
- checkpoint / gaia_osr82 – r82
- checkpoint / gaia_osr82 – r82
- checkpoint / gaia_osr82 – r82
- checkpoint / gaia_osr82 – r82
- checkpoint / gaia_osr82 – r82
- checkpoint / gaia_osr82 – r82
- checkpoint / gaia_osr82 – r82
- checkpoint / gaia_osr82 – r82
- checkpoint / gaia_osr82 – r82
- checkpoint / gaia_osr82 – r82
- checkpoint / gaia_osr82 – r82
- checkpoint / gaia_osr82 – r82
- checkpoint / gaia_osr82 – r82
- checkpoint / gaia_osr82 – r82
- checkpoint / gaia_osr82 – r82
- checkpoint / gaia_osr82 – r82
- checkpoint / gaia_osr82 – r82
- checkpoint / gaia_osr82 – r82
- checkpoint / gaia_osr82 – r82
- checkpoint / gaia_osr82.10 – r82.10
- checkpoint / gaia_osr82.10 – r82.10
- checkpoint / Quantum Security GatewayR81.20 with Jumbo Hotfix Take 165 or below – R81.20 with Jumbo Hotfix Take 165 or below
- checkpoint / Quantum Security GatewayR82 with Jumbo Hotfix Take 125 or below – R82 with Jumbo Hotfix Take 125 or below
- checkpoint / Quantum Security GatewayR82.10 with Jumbo Hotfix Take 43 or below – R82.10 with Jumbo Hotfix Take 43 or below
News coverage
- Check Point warns of hackers exploiting Security Gateway VPN RCE flawBleepingComputer · 9/23/2026
- Dutch NCSC: Critical Check Point VPN flaws exploitation is imminentBleepingComputer · 9/12/2026
References
Updated 21m ago · 8 sources