CVE-2026-107484: Check Point input and authorization validation vulnerability in Gaia Portal backend handlers could allow an authenticated, non-administrative user to perform privileged operations that should be restricted to administrators
This Check Point advisory covers CVE-2026-107484 in Quantum Security Gateway and Quantum Security Management.
- CVE-2026-107484
Key facts
- Vendor rating
- High, CVSS 7.3
- CVSS vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N· base score 7.3, scored by checkpointAttack vector: adjacent network. Attack complexity: low. Privileges required: low. User interaction: none. Scope: unchanged. Confidentiality impact: high. Integrity impact: high. Availability impact: none.- Weakness
- CWE-269: Improper Privilege Management.
- EPSS
- 1.87% chance of exploitation in the next 30 days (79th percentile). FIRST EPSS, .
- CISA KEV
- Not listed (catalogue checked )
- Affected
- Quantum Security Gateway R82.10 with Jumbo Hotfix Take 50 or below; Quantum Security Gateway R82 with Jumbo Hotfix Take 130 or below; Quantum Security Gateway R81.20 with Jumbo Hotfix Take 173 or below and 3 more below
- Source published
- Source revised
- Listed by VulniPulse
Compiled by VulniPulse from the linked sources. How records are collected and checked.
Affected products & platforms
Description
An input and authorization validation vulnerability in Gaia Portal backend handlers could allow an authenticated, non-administrative user to perform privileged operations that should be restricted to administrators.
Affected products named by the advisory: Quantum Security Gateway; Quantum Security Management.
Text from the source record.
- Quantum Security Gateway R82.10 with Jumbo Hotfix Take 50 or below
- Quantum Security Gateway R82 with Jumbo Hotfix Take 130 or below
- Quantum Security Gateway R81.20 with Jumbo Hotfix Take 173 or below
- Quantum Security Management R82.10 with Jumbo Hotfix Take 50 or below
- Quantum Security Management R82 with Jumbo Hotfix Take 130 or below
- Quantum Security Management R81.20 with Jumbo Hotfix Take 173 or below
Official advisory · high-confidence parse· fetched ·verify at source
End-of-life dates for Check Point Quantum Gateway / Gaia
More Check Point advisories
CVE-2026-123039Nov 12, 2026The Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socketCVE-2026-85103Sep 9, 2026heap-based buffer overflow in VPN certificate ASN.1 decodingCVE-2026-62145Jul 22, 2026vulnerability in Check Point Gaia PortalCVE-2026-93616Sep 22, 2026directory traversal and file uploadCVE-2026-91843Sep 16, 2026Stack overflow in login process to the Security Management and Log ServersCVE-2026-85102Sep 9, 2026Quantum Security Gateway remote code execution
Check Point advisories, November 2026All Check Point advisories
Get an email when Check Point Quantum Gateway / Gaia publishes the next one.
See Check Point Quantum Gateway / Gaia's last 90 days first. Live alerts for one product are free for life; every vendor is US$15 a month after a free month.