Input and Authorization Validation Vulnerability in Gaia Portal by Check Point
CVE-2026-107484

7.3HIGH

Key Information:

Vendor

Checkpoint
Status
Quantum Security Gateway
Quantum Security Management
Vendor
CVE Published:
12 November 2026

What is CVE-2026-107484?

A critical flaw exists within Gaia Portal's backend handlers that allows an authenticated user without administrative privileges to execute sensitive actions meant exclusively for administrators. This vulnerability arises from inadequate input and authorization validation, which opens the door for potential misuse by non-administrative users, leading to unauthorized access to privileged functionalities.

Affected Version(s)

Quantum Security Gateway R82.10 with Jumbo Hotfix Take 50 or below

Quantum Security Gateway R82 with Jumbo Hotfix Take 130 or below

Quantum Security Gateway R81.20 with Jumbo Hotfix Take 173 or below

References

https://support.checkpoint.com/results/sk/sk1000291

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.