Vendor dossier / #41
Check Point vulnerabilities in CISA KEV
Answer CISA's KEV catalog lists 5 Check Point vulnerabilities as of catalog 2026.09.23, 0.3% of all 1,721 entries and rank 41 of 283 vendors. The first was added on 2024-05-30 and the most recent on 2026-09-22; 2 are flagged as used in ransomware campaigns.
- KEV entries
- 50.3% of catalog
- Last 90 days
- +3added
- Ransomware: known
- 240%
- Products
- 4distinct
- First added
- 2024-05-30
- Latest added
- 2026-09-22
- Median days to due
- 3
- Open deadlines
- 2federal
TAdditions per quarter
Table view (by year)
| Year | Added |
|---|---|
| 2021 | 0 |
| 2022 | 0 |
| 2023 | 0 |
| 2024 | 1 |
| 2025 | 0 |
| 2026 | 4 |
QCommon questions
How many Check Point vulnerabilities are in CISA KEV?
5, as of KEV catalog 2026.09.23 (released 2026-09-23). That is 0.3% of the catalog.
Which Check Point product has the most KEV entries?
Multiple Products, with 2 entries. 4 products appear in total.
How many Check Point KEV vulnerabilities are linked to ransomware?
2 of 5 (40%) are flagged by CISA as known to be used in ransomware campaigns.
When was the latest Check Point vulnerability added to KEV?
2026-09-22 (CVE-2026-93616).
What is the most common weakness in Check Point KEV entries?
CWE-287 (Improper authentication), listed on 2 entries.
PProducts
| Product | Entries | Share of vendor |
|---|---|---|
| Multiple Products | 2 | 40% |
| SmartConsole | 1 | 20% |
| Security Gateway | 1 | 20% |
| Quantum Security Gateways | 1 | 20% |
WWeaknesses
| CWE | Entries | Share of vendor |
|---|---|---|
| CWE-287 Improper authentication | 2 | 40% |
| CWE-22 Path traversal | 1 | 20% |
| CWE-295 | 1 | 20% |
| CWE-200 Information exposure | 1 | 20% |
EAll 5 entries
| CVE | Product | Vulnerability | Added | Due | Ransomware | CWE |
|---|---|---|---|---|---|---|
| CVE-2026-93616 | Multiple Products | Check Point Multiple Products Path Traversal Vulnerability | New | Open | Unknown | CWE-22 |
| CVE-2026-85102 | Multiple Products | Check Point Multiple Products Improper Certificate Validation Vulnerability | New | Open | Unknown | CWE-295 |
| CVE-2026-16232 | SmartConsole | Check Point SmartConsole Improper Authentication Vulnerability | Unknown | CWE-287 | ||
| CVE-2026-50751 | Security Gateway | Check Point Security Gateway Improper Authentication Vulnerability | Known | CWE-287 | ||
| CVE-2024-24919 | Quantum Security Gateways | Check Point Quantum Security Gateways Information Disclosure Vulnerability | Known | CWE-200 |
Cite this
CISA's Known Exploited Vulnerabilities catalog lists 5 Check Point vulnerabilities (0.3% of all entries). Source: Telemetry analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.09.23 (released 2026-09-23). https://glide-telemetry.pages.dev/vendors/check-point/
Source: CISA KEV catalog v2026.09.23, released 2026-09-23. Windows end 2026-09-23. Vendor names are CISA's vendorProject strings; Telemetry states no facts about Check Point beyond this data.