CVE-2026-107484 PUBLISHED

Input Validation Vulnerability in Gaia Portal backend handlers allows privilege escalation by an authenticated user

Assigner: checkpoint
Reserved: 08.10.2026 Published: 12.11.2026 Updated: 12.11.2026

An input and authorization validation vulnerability in Gaia Portal backend handlers could allow an authenticated, non-administrative user to perform privileged operations that should be restricted to administrators.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS Score: 7.3

Attack Vector	Adjacent Network	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	High
Privileges Required	Low	Integrity Impact	High
User Interaction	None	Availability Impact	None

CVSS 3.1

Product Status

Vendor	checkpoint
Product	Quantum Security Gateway
Versions	Version R82.10 with Jumbo Hotfix Take 50 or below is affected Version R82 with Jumbo Hotfix Take 130 or below is affected Version R81.20 with Jumbo Hotfix Take 173 or below is affected

Vendor	checkpoint
Product	Quantum Security Management
Versions	Version R82.10 with Jumbo Hotfix Take 50 or below is affected Version R82 with Jumbo Hotfix Take 130 or below is affected Version R81.20 with Jumbo Hotfix Take 173 or below is affected

References

https://support.checkpoint.com/results/sk/sk1000291

Problem Types

CWE-269: Improper Privilege Management. CWE