checkpoint Vulnerabilities and Affected Products
Vulnerabilities associated with Identity Agent.
Products
Clear product- Quantum Security Gateway8 vulnerabilities
- Quantum Security Management4 vulnerabilities
- Check Point Mobile Access3 vulnerabilities
- Check Point SmartConsole2 vulnerabilities
- Identity Agent2 vulnerabilities
- Multi-Domain Security Management2 vulnerabilities
- Spark Firewalls2 vulnerabilities
- Check Point Harmony SASE1 vulnerability
- Check Point Management Log Server1 vulnerability
- Check Point Quantum Gateway, Spark Gateway and CloudGuard Network1 vulnerability
- cloudguard_network1 vulnerability
- clusterxl1 vulnerability
- ClusterXL, Multi-Domain Security Management, Quantum Appliances, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Security Management1 vulnerability
- gaia_portal1 vulnerability
- Harmony Endpoint Security Client for Windows1 vulnerability
- Harmony Endpoint.1 vulnerability
- harmony_endpoint1 vulnerability
- Hramony SASE1 vulnerability
- Identity Awareness1 vulnerability
- identity_agent1 vulnerability
- Multi-Domain Security Management Server1 vulnerability
- Multi-Domain Security Management, Quantum Security Management1 vulnerability
- multi-domain_management1 vulnerability
- quantum_appliances1 vulnerability
- quantum_maestro1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-10847HIGH | Local Privilege Escalation vulnerability in Check Point Identity Agent Full for Windows OSA local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS. An authenticated local user may be able to execute arbitrary code with SYSTEM privileges due to improper handling of executable resolution during the log collection process. Successful exploitation could allow an attacker to gain elevated privileges on the affected Windows endpoint. CWE-427Jun 11, 2026 | CVSS7.8v3.1 | EPSS0.124% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-8304MEDIUM | Information Disclosure in Identity Agent Registry KeysAn authenticated local user can obtain information that allows claiming security policy rules of another user due to sensitive information being accessible in the Windows Registry keys for Check Point Identity Agent running on a Terminal Server. CWE-200Dec 22, 2025 | CVSS6.5v3.1 | EPSS0.107% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |