Multiple privilege escalation and security policy bypass vulnerabilities in Check Point products
Multiple vulnerabilities have been identified in various Check Point products including Force Firewalls, Multi-Domain Security Management, Scalable Platforms, Security Gateway, and Security Management in versions prior to 81.20 and 82.20 with their respective patches. These vulnerabilities could allow an attacker to elevate privileges and bypass security policies, posing significant security risks. Administrators are urged to consult Check Point's official security bulletins for the patches dated November 12, 2026, and apply them promptly to mitigate the risks. The referenced CVEs related to these vulnerabilities are CVE-2026-107484, CVE-2026-120490, and CVE-2026-123039.
Entenda a falha
A vulnerabilidade
Check Point disclosed several vulnerabilities (CVE-2026-107484, CVE-2026-120490, CVE-2026-123039) that let an attacker escalate privileges and bypass the security policy. The affected products are Force Firewalls, Multi-Domain Security Management, Scalable Platforms, Security Gateway and Security Management. Affected versions are 81.x before 81.20 and 82.x before 82.20, and CERT-FR lists the fixes as patch 174 for 81.20 and patch 14 for 82.20. The articles do not say which CVE is which flaw, how severe each one is, or what access or configuration an attacker needs.
Como foi descoberta
The articles do not say who found the flaws or how. Check Point published its security bulletins sk1000291, sk1000362 and sk1000364 on November 12, 2026, and CERT-FR issued its advisory CERTFR-2026-AVI-1529 on November 13, 2026, pointing administrators to the vendor bulletins for the patches.
Explicação gerada por IA a partir da matéria e dos artigos, em 13/11/2026 12:17.
Linha do tempo
-
Multiple privilege escalation and security policy bypass vulnerabilities in Check Point products
ler a análise desta fonte ocultar
Multiple vulnerabilities have been identified in various Check Point products including Force Firewalls, Multi-Domain Security Management, Scalable Platforms, Security Gateway, and Security Management in versions prior to 81.20 and 82.20 with their respective patches. These vulnerabilities could allow an attacker to elevate privileges and bypass security policies, posing significant security risks. Administrators are urged to consult Check Point's official security bulletins for the patches dated November 12, 2026, and apply them promptly to mitigate the risks. The referenced CVEs related to these vulnerabilities are CVE-2026-107484, CVE-2026-120490, and CVE-2026-123039.