CVE-2026-62145 PUBLISHED

Local Privilege Escalation in Gaia Portal

Assigner: checkpoint
Reserved: 13.07.2026 Published: 22.07.2026 Updated: 22.07.2026

A vulnerability in Check Point Gaia Portal allows an authenticated attacker with read-only Gaia Portal privileges to execute commands with root privileges.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Score: 7.5

Product Status

Vendor checkpoint
Product Quantum Security Gateway
Versions
  • Version R82.10 with Jumbo Hotfix Take 36 or below is affected
  • Version R82 with Jumbo Hotfix Take 118 or below is affected
  • Version R81.20 with Jumbo Hotfix Take 158 or below is affected
  • Version R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30 is affected
Vendor checkpoint
Product Quantum Security Management
Versions
  • Version R82.10 with Jumbo Hotfix Take 36 or below is affected
  • Version R82 with Jumbo Hotfix Take 118 or below is affected
  • Version R81.20 with Jumbo Hotfix Take 158 or below is affected
  • Version R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30 is affected

References

Problem Types

  • CWE-269: Improper Privilege Management. CWE