Check Point
33 tracked CVEs, all years.
Who found these
All years. Vulnerabilities the vendor's own security team found, versus those reported by outsiders.
- Not disclosed 33
33 of 33 carry no attribution and are excluded from the percentage. Check Point does not populate the CVE record's discovery field, and rarely lists credits. Their CVEs are therefore almost all counted as "not disclosed" here — that is a gap in the published data, not evidence about how the vulnerabilities were found. Methodology.
Severity
How severe Check Point's disclosures are, and where they land.
- Critical 8 44.4%
- High 7 38.9%
- Medium 3 16.7%
Table view
| Category | Critical | High | Medium | Low | Unscored | Total |
|---|---|---|---|---|---|---|
| Firewall / NGFW | 3 | 5 | 2 | 0 | 0 | 10 |
| Network & Security Management | 6 | 1 | 1 | 0 | 0 | 8 |
| Identity / IAM / MFA | 0 | 1 | 0 | 0 | 0 | 1 |
| SASE / SSE / Secure Web | 0 | 1 | 0 | 0 | 0 | 1 |
| All | 8 | 7 | 3 | 0 | 0 | 18 |
A CVE affecting two categories counts once under each, so the rows sum to more than the total.
By product category, 2026
Compare firewall against endpoint exposure, and against last year.
| Category | Risk | CVEs | Exploited | Counts toward risk |
|---|---|---|---|---|
| Firewall / NGFW | 154.1 | 10 | 2 | Yes |
| Endpoint / EDR | 0.0 | 0 | 0 | Yes |
| SASE / SSE / Secure Web | 5.0 | 1 | 0 | Yes |
| VPN & Remote Access | 0.0 | 0 | 0 | Yes |
| Email Security | 0.0 | 0 | 0 | Yes |
| Identity / IAM / MFA | 5.0 | 1 | 0 | Yes |
| SIEM & Log Management | 0.0 | 0 | 0 | Yes |
| Threat Detection & Sandbox | 0.0 | 0 | 0 | Yes |
| Vulnerability Management | 0.0 | 0 | 0 | Yes |
| Web & Application Security | 0.0 | 0 | 0 | Yes |
| Cloud Security | 0.0 | 0 | 0 | Yes |
| OT / IoT Security | 0.0 | 0 | 0 | Yes |
| Network & Security Management | 159.5 | 8 | 2 | Yes |
| Routing & Switching | N/A | N/A | N/A | Not applicable |
| Other Products | N/A | N/A | N/A | Not applicable |
No categorized CVEs for this year yet.
N/A marks a category Check Point does not compete in. A zero there would read as a clean record rather than an absence; a real 0 means they ship products in that category and had no CVEs this year.
Products
2026
| Product | Category | CVEs | Exploited |
|---|---|---|---|
| Quantum Security Gateway | Firewall / NGFW | 10 | 2 |
| Quantum Security Management | Network & Security Management | 8 | 2 |
| Multi-Domain Security Management | Network & Security Management | 3 | 1 |
| Quantum Spark | Firewall / NGFW | 2 | 1 |
| Harmony SASE | SASE / SSE / Secure Web | 1 | 0 |
| Identity Agent | Identity / IAM / MFA | 1 | 0 |
CVEs
Most recent first, up to 300.
| CVE | Published | Severity | Products | EPSS |
|---|---|---|---|---|
| CVE-2026-93616 KEV | Sep 22, 2026 | Critical 9.8 | check-point-security-management | 0.024 |
| CVE-2026-91843 | Sep 16, 2026 | Critical 9.8 | check-point-security-management | 0.005 |
| CVE-2026-85103 | Sep 9, 2026 | Critical 9.8 | check-point-quantum-gateway, check-point-security-management | 0.004 |
| CVE-2026-85102 KEV | Sep 9, 2026 | Critical 9.8 | check-point-quantum-gateway | 0.007 |
| CVE-2026-18574 | Aug 3, 2026 | Critical 9.3 | check-point-multi-domain-management, check-point-security-management | 0.010 |
| CVE-2026-62145 | Jul 22, 2026 | High 7.5 | check-point-quantum-gateway, check-point-security-management | 0.076 |
| CVE-2026-62144 | Jul 22, 2026 | Critical 9.1 | check-point-multi-domain-management, check-point-security-management | 0.208 |
| CVE-2026-16232 KEV | Jul 22, 2026 | Critical 9.3 | check-point-multi-domain-management, check-point-security-management | 0.721 |
| CVE-2026-10847 | Jun 11, 2026 | High 7.8 | check-point-identity-agent | 0.001 |
| CVE-2026-50751 KEV | Jun 8, 2026 | Critical 9.3 | check-point-quantum-gateway, check-point-spark | 0.838 |
| CVE-2026-50752 | Jun 8, 2026 | High 7.4 | check-point-quantum-gateway, check-point-spark | 0.050 |
| CVE-2026-48136 | May 26, 2026 | Medium 4.1 | check-point-security-management | 0.041 |
| CVE-2026-48135 | May 26, 2026 | Medium 5.3 | check-point-quantum-gateway | 0.026 |
| CVE-2026-48134 | May 26, 2026 | Medium 5.6 | check-point-quantum-gateway | 0.044 |
| CVE-2026-48133 | May 26, 2026 | High 7.5 | check-point-quantum-gateway | 0.048 |
| CVE-2026-48132 | May 26, 2026 | High 8.1 | check-point-quantum-gateway | 0.021 |
| CVE-2026-48131 | May 26, 2026 | High 8.1 | check-point-quantum-gateway | 0.027 |
| CVE-2025-9142 | Jan 14, 2026 | High 7.5 | check-point-harmony-sase | 0.001 |
| CVE-2025-8305 | Dec 22, 2025 | Medium 6.5 | check-point-identity-awareness | 0.001 |
| CVE-2025-8304 | Dec 22, 2025 | Medium 6.5 | check-point-identity-agent | 0.001 |
| CVE-2025-3831 | Aug 12, 2025 | High 8.1 | check-point-harmony-sase | 0.004 |
| CVE-2024-52885 | Aug 6, 2025 | Medium 5 | check-point-mobile-access | 0.005 |
| CVE-2025-2028 | Aug 6, 2025 | Medium 6.5 | check-point-log-server | 0.002 |
| CVE-2024-24915 | Jun 29, 2025 | Medium 6.1 | check-point-smartconsole | 0.002 |
| CVE-2024-24916 | Jun 19, 2025 | Medium 6.5 | check-point-smartconsole | 0.027 |
| CVE-2024-52888 | Apr 27, 2025 | Medium 5.4 | check-point-mobile-access | 0.002 |
| CVE-2024-52887 | Apr 27, 2025 | Low 3.5 | check-point-mobile-access | 0.002 |
| CVE-2024-24911 | Feb 6, 2025 | Medium 5.3 | check-point-multi-domain-management, check-point-security-management | 0.004 |
| CVE-2024-6233 | Nov 22, 2024 | High 7.8 | check-point-zonealarm | 0.004 |
| CVE-2024-24914 | Nov 7, 2024 | High 8 | check-point-multi-domain-management, check-point-quantum-gateway, check-point-security-management | 0.004 |
| CVE-2024-24919 KEV | May 28, 2024 | High 8.6 | check-point-cloudguard, check-point-quantum-gateway, check-point-spark | 1.000 |
| CVE-2024-24912 | May 1, 2024 | Medium 6.7 | check-point-harmony-endpoint | 0.002 |
| CVE-2024-24910 | Apr 18, 2024 | High 7.3 | check-point-identity-agent, check-point-zonealarm | 0.002 |