LIVE FEED
HIGH CWE-269

CVE-2026-62145

Local Privilege Escalation in Gaia Portal

Check Point·Quantum Security Gateway

7.5/ 10
CVSS 3.1
High severity
0.39%
EPSS exploit odds
Chance of exploitation in the next 30 days
Higher than 34% of all CVEs
Not listed
CISA KEV catalog
No confirmed in-the-wild exploitation on CISA's list.
Timeline
Published
Jul 22, 2026
Updated
Jul 24, 2026
First covered
Jul 23, 2026
Latest story
4 months ago

Summary

A vulnerability in Check Point Gaia Portal allows an authenticated attacker with read-only Gaia Portal privileges to execute commands with root privileges.

CWE-269Improper Privilege Management.

Attack profile

Attack vectorNetwork
ComplexityHigh
PrivilegesLow
User interactionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

  • Check Point Quantum Security GatewayR82.10 with Jumbo Hotfix Take 36 or belowR82 with Jumbo Hotfix Take 118 or belowR81.20 with Jumbo Hotfix Take 158 or belowR81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30
  • Check Point Quantum Security ManagementR82.10 with Jumbo Hotfix Take 36 or belowR82 with Jumbo Hotfix Take 118 or belowR81.20 with Jumbo Hotfix Take 158 or belowR81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30

References

Daily at 7:00 AM Eastern

The 0700 Brief

Every new security and AI story, summarised in one email. Confirm by email, unsubscribe in one click.

43 readers have subscribed