Command Execution Vulnerability in Check Point Gaia Portal
CVE-2026-62145

7.5HIGH

Key Information:

Vendor

Checkpoint
Status
Quantum Security Gateway
Quantum Security Management
Vendor
CVE Published:
22 July 2026

What is CVE-2026-62145?

A security issue in Check Point Gaia Portal permits authenticated users with read-only permissions to exploit the system by executing commands with elevated root privileges. This vulnerability poses a significant risk as it can lead to unauthorized access and potential system compromise. It is crucial for organizations using this portal to review their permission settings and apply recommended security measures to mitigate the effects of this flaw.

Affected Version(s)

Quantum Security Gateway R82.10 with Jumbo Hotfix Take 36 or below

Quantum Security Gateway R82 with Jumbo Hotfix Take 118 or below

Quantum Security Gateway R81.20 with Jumbo Hotfix Take 158 or below

References

https://support.checkpoint.com/results/sk/sk185153

EPSS Score

7% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.