Check Point Quantum security vulnerabilities
Firewall. Public CVE monitoring for Check Point Quantum. Vendor security advisories are linked on this page.
Built for Operators of this product.
75 public records · 0 security-fix timeline events. 0 published in the last 7 days. 43 store a version range.
What you can do here
Current vulnerabilities
KEV-first priority plus newest publications for this stack.
Verified security fixes
Timeline events and, for Odoo, Community Git patch evidence — not keyword-only guesses.
Monitoring
Watch this technology from your account when you want alerts on new matches.
Patch intelligence
Use version checkers and advisory links to confirm upgrades before you change production.
- Critical 3
- High 8
- Medium 3
- Low 0
2026-08-0414 issues2026-11-01
Known exploited
View all known exploited- Critical9.8Check Point Multiple Products Path Traversal VulnerabilityPatch nowKEVEPSS 91.61%Sep 22, 2026
- Critical9.3Check Point Security Gateway Improper Authentication VulnerabilityPatch nowKEVEPSS 85.34%Jun 8, 2026
- Critical9.8Check Point Multiple Products Improper Certificate Validation VulnerabilityPatch nowKEVEPSS 54.14%Sep 9, 2026
- Critical9.3Check Point SmartConsole Improper Authentication VulnerabilityPatch nowKEVEPSS 3.52%Jul 19, 2026
Recently published
Browse catalog- Medium6.0LangGraph: Namespace labels containing reach other namespaces in Postgres and SQLite storesCheck if you run itEPSS 0.30%Oct 23, 2026
- HighCVE-2026-98869: bpf: Infer zext_dst based on static register liveness analysisCheck if you run itEPSS 0.17%Oct 21, 2026
- High7.7docTR through 1.1.0 contains an unsafe deserialization vulnerability in load_pretrained_params() that loads checkpoints with torch.load without weights_only=True.Check if you run itEPSS 0.37%Oct 19, 2026
- High8.7IntentKit 2.6.3 Executor Tool Authorization Bypass via ToolNodeCheck if you run itEPSS 0.44%Oct 15, 2026
- Critical10.0Podman: The command can be instructed to disable almost all sandboxing by image annotationCheck if you run itEPSS 0.53%Oct 15, 2026
- High7.8ZDI-26-756: (0Day) Genesis World load_checkpoint Deserialization of Untrusted Data Remote Code Execution VulnerabilityOpen the advisoryOct 13, 2026
- High7.8containerd CRI plugin: Checkpoint restore bypasses destination security contextCheck if you run itEPSS 0.11%Oct 12, 2026
- Critical9.8Check Point Multiple Products Path Traversal VulnerabilityPatch nowKEVEPSS 91.61%Sep 22, 2026
- High8.8A vulnerability in CRI-O checkpoint restore allows a user who can create a pod from a malicious checkpointed container to bypass the destination Kubernetes security context.Check if you run itEPSS 0.65%Sep 21, 2026
- High8.0Cri-o: cri-o: insufficient validation during container checkpoint restoreCheck if you run itEPSS 0.48%Sep 21, 2026