Checkpoint Gaia Portal: Auth Read-Only PrivEsc to Root (CVE-2026-62145)
CVE-2026-62145 Published on July 22, 2026
Local Privilege Escalation in Gaia Portal
A vulnerability in Check Point Gaia Portal allows an authenticated attacker with read-only Gaia Portal privileges to execute commands with root privileges.
Vulnerability Analysis
CVE-2026-62145 can be exploited with network access, and requires small amount of user privileges. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.
Weakness Type
Improper Privilege Management
The software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
Products Associated with CVE-2026-62145
Want to know whenever a new CVE is published for Check Point Software Security Gateway? stack.watch will email you.
Affected Versions
checkpoint Quantum Security Gateway:- Version R82.10 with Jumbo Hotfix Take 36 or below is affected.
- Version R82 with Jumbo Hotfix Take 118 or below is affected.
- Version R81.20 with Jumbo Hotfix Take 158 or below is affected.
- Version R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30 is affected.
- Version R82.10 with Jumbo Hotfix Take 36 or below is affected.
- Version R82 with Jumbo Hotfix Take 118 or below is affected.
- Version R81.20 with Jumbo Hotfix Take 158 or below is affected.
- Version R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30 is affected.