Vendor scorecard
Check Point
Check Point security disclosure record — CVE volume, CVSS severity mix and product-category breakdown, sourced from the NIST NVD.
CPE: checkpoint
Product families
4
Open in latest
16
Inferred — see methodology
Last disclosure
Jun 8, 2026
01
Product categories
4 trackedCVE volume, severity mix and the inferred latest shipping version per category.
| Category | CVEs | Volume | Severity mix | Open | Inferred latest |
|---|---|---|---|---|---|
| Gaia OSNGFW / Network Security · Secure Remote Access / VPN · Network Detection / IDS-IPSgaia_os, security_gateway | 1 | 12 | r77.30LOW | ||
| CloudGuardNGFW / Network Security · SD-WAN & SASEcloudguard_network_security, cloudguard_posture_management, cloudguard_log.ic | 0 | 0 | unknown | ||
| HarmonySecure Remote Access / VPN · Zero-Trust / ZTNAharmony_endpoint, harmony_mobile, harmony_connect | 0 | 1 | e88.20LOW | ||
| ManagementNetwork Management & Monitoringmulti-domain_management, smartconsole, r80… | 0 | 3 | r80.10LOW |
02
Recent CVEs
2 shownMost recently published, newest first. Each ID links to its NVD record.
| CVE | Severity | CVSS | Summary | Published |
|---|---|---|---|---|
| CVE-2026-50751(opens NVD record) | Critical | 9.3 | A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password. | Jun 8, 2026 |
| CVE-2024-52885(opens NVD record) | Medium | 5.0 | The Mobile Access Portal's File Share application is vulnerable to a directory traversal attack, allowing an authenticated, malicious end-user (authorized to at least one File Share application) to list the file names of 'nobody'-accessible directories on the Mobile Access gateway. | Aug 6, 2025 |
1 CVEs · 4 product families