Skip to content
COOEY

FAIL › dossier

Check Point

VENDOR

· dossier confidence 20%

Check Point is a major network security vendor with a history of critical and high-severity vulnerabilities in its core products, including information disclosure, RCE, and authentication bypass flaws. The company responds to critical CVEs with rapid patching plans but has a track record of exploitable flaws in its gateways and management consoles.

Failure events
3
Zero-days
0
RCEs
1
On KEV
3
Critical
2
Worst shame
85
PROFILE
Categorynetwork security vendorWhat they doCheck Point provides next-generation firewalls, cloud security, and network security solutions for enterprises and SMBs. Websitehttps://www.checkpoint.com ↗
SECURITY POSTURE

Check Point has a mixed security posture with a history of critical and high-severity vulnerabilities in its core products, including information disclosure, remote code execution, and authentication bypass flaws, though it responds to critical CVEs with rapid patching plans.

Notable failures
  • CVE-2024-24919: critical information disclosure in Quantum Security Gateways
  • CVE-2026-16232: high RCE in SmartConsole
  • CVE-2026-50751: critical IKEv1 authentication bypass in Security Gateway
Patterns: critical vulnerabilities in core gateway and management products; information disclosure and remote code execution in unpatched components
FAILURE HISTORY · 3
DATEEVENTSEVSUMMARY
2024-05-30 CVE-2024-24919 critical Check Point Quantum Security Gateways suffered an information disclosure vulnerability actively exploited in the wild, allowing attackers to access data on gateways with VPN enabled.
2026-07-22 CVE-2026-16232 high Check Point SmartConsole had unpatched RCE allowing remote admin access
2026-06-08 CVE-2026-50751 critical Check Point Security Gateway allows unauthenticated attackers to bypass VPN authentication via an IKEv1 key exchange flaw.
DOSSIER SOURCES
Open questions: Check Point's current patching SLA for critical vulnerabilities · Check Point's incident response procedures for actively exploited vulnerabilities
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-08-26 04:31:47.563594+00:00