{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T16:42:00.965Z",
  "tag": {
    "id": "check-point",
    "label": "Check Point",
    "isStack": false,
    "url": "https://pwn.watch/t/check-point",
    "feed": "https://pwn.watch/t/check-point/feed.xml"
  },
  "counts": {
    "incidents": 3,
    "live": 0,
    "notFullyPatched": 0,
    "patched": 3
  },
  "incidents": [
    {
      "slug": "check-point-smartconsole-cve-2026-16232",
      "title": "Check Point SmartConsole: Check Point SmartConsole Improper Authentication Vulnerability",
      "url": "https://pwn.watch/i/check-point-smartconsole-cve-2026-16232",
      "json": "https://pwn.watch/i/check-point-smartconsole-cve-2026-16232.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Check Point SmartConsole",
      "tags": [
        "check-point",
        "cisa-kev",
        "auth-bypass"
      ],
      "cveIds": [
        "CVE-2026-16232"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2026-07-22",
      "closedAt": "2026-07-22",
      "updatedAt": "2026-07-22",
      "summary": "Check Point SmartConsole contains an improper authentication vulnerability which could allow an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Added to CISA KEV on 2026-07-22.",
      "xPost": null
    },
    {
      "slug": "check-point-security-gateway-cve-2026-50751",
      "title": "Check Point Security Gateway: Check Point Security Gateway Improper Authentication Vulnerability",
      "url": "https://pwn.watch/i/check-point-security-gateway-cve-2026-50751",
      "json": "https://pwn.watch/i/check-point-security-gateway-cve-2026-50751.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Check Point Security Gateway",
      "tags": [
        "check-point",
        "ransomware",
        "cisa-kev",
        "auth-bypass"
      ],
      "cveIds": [
        "CVE-2026-50751"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2026-06-08",
      "closedAt": "2026-06-08",
      "updatedAt": "2026-06-08",
      "summary": "Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could allow an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password. Added to CISA KEV on 2026-06-08.",
      "xPost": null
    },
    {
      "slug": "check-point-quantum-gateway-info-disclosure-cve-2024-24919",
      "title": "Check Point VPN gateway arbitrary file read (CVE-2024-24919) exploited",
      "url": "https://pwn.watch/i/check-point-quantum-gateway-info-disclosure-cve-2024-24919",
      "json": "https://pwn.watch/i/check-point-quantum-gateway-info-disclosure-cve-2024-24919.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Check Point Quantum Security Gateways",
      "tags": [
        "check-point",
        "vpn",
        "cisa-kev",
        "ransomware"
      ],
      "cveIds": [
        "CVE-2024-24919"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-05-28",
      "closedAt": "2024-05-30",
      "updatedAt": "2024-05-30",
      "summary": "Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several product lines from Check Point, including CloudGuard Network, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark Appliances. Added to the CISA KEV catalog on 2024-05-30. CISA lists known use in ransomware campaigns.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": [
    {
      "incident": "check-point-smartconsole-cve-2026-16232",
      "incidentTitle": "Check Point SmartConsole: Check Point SmartConsole Improper Authentication Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2026-07-22",
      "title": "CISA added CVE-2026-16232 to the KEV catalog (due 2026-07-25).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/check-point-smartconsole-cve-2026-16232"
    },
    {
      "incident": "check-point-security-gateway-cve-2026-50751",
      "incidentTitle": "Check Point Security Gateway: Check Point Security Gateway Improper Authentication Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2026-06-08",
      "title": "CISA added CVE-2026-50751 to the KEV catalog (due 2026-06-11).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/check-point-security-gateway-cve-2026-50751"
    },
    {
      "incident": "check-point-quantum-gateway-info-disclosure-cve-2024-24919",
      "incidentTitle": "Check Point VPN gateway arbitrary file read (CVE-2024-24919) exploited",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-05-30",
      "title": "CISA added CVE-2024-24919 to the KEV catalog (federal deadline 2024-06-20)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/check-point-quantum-gateway-info-disclosure-cve-2024-24919"
    },
    {
      "incident": "check-point-quantum-gateway-info-disclosure-cve-2024-24919",
      "incidentTitle": "Check Point VPN gateway arbitrary file read (CVE-2024-24919) exploited",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-05-28",
      "title": "CVE-2024-24919 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-24919",
      "url": "https://pwn.watch/i/check-point-quantum-gateway-info-disclosure-cve-2024-24919"
    }
  ]
}