LIVE FEED

Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiperHardening a Personal Linux Server in an AfternoonMicrosoft 365 outage disrupts Outlook, Teams, and Copilot worldwideCheck Point patches zero-day root escalation flaw exploited against customersHackers Compromise 4,800 GitHub Accounts to Steal Cloud CredentialsHow to Put a Self-Hosted Service Behind SSO and Intrusion Blocking in an AfternoonBaker Tilly notifies clients of data breach at third-party provider

Check Point CVEs

Every Check Point vulnerability SECBORN has reported on, with live CVSS severity, CISA known-exploited status and EPSS exploit odds.

10Tracked CVEs 6Known exploited 7Critical 9.0+ 3Covered this week

All Known exploited Critical High This week

6 CVEs EPSSCoverage

7.8CVSS 3.1 CVE-2026-123039 Exploited Local privilege escalation to root in the DynamicCLI daemon via local world-writable control socket Check Point · Multiple Products EPSS 1.3% 2 stories 10 hours ago 9.8CVSS 3.1 CVE-2026-85102 Exploited Improper Certificate Validation in Quantum Security Gateway Check Point · Multiple Products EPSS 54% 3 stories 21 hours ago 9.8CVSS 3.1 CVE-2026-93616 Exploited Directory Traversal and File upload allows execution of arbitrary script on the Management Server Check Point · Multiple Products EPSS 92% 1 story 21 hours ago 9.3CVSS 4.0 CVE-2026-16232 Exploited Authentication Bypass in the SmartConsole Login Process Using an Application Token Check Point · SmartConsole EPSS 3.5% 2 stories 2 months ago 9.3CVSS 3.1 CVE-2026-50751 Exploited Ransomware User Authentication Bypass in VPN Remote Access and Mobile Access Check Point · Security Gateway EPSS 85% 3 stories 2 months ago 8.6CVSS 3.1 CVE-2024-24919 Exploited Ransomware Information disclosure Check Point · Quantum Security Gateways EPSS >99.9% 1 story 4 months ago

Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.