ACTIVELY EXPLOITED
CVE-2024-24919: Check Point Quantum Security Gateways Information Disclosure Vulnerability
| Vendor | Check Point |
|---|---|
| Product | Quantum Security Gateways |
| Actively exploited | Yes |
| Added to CISA KEV | 30 May 2024 |
| CISA federal deadline | 20 Jun 2024 |
| Ransomware use | Known |
| Weakness (CWE) | CWE-200 |
Required action (CISA's text)
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Description (NVD)
Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several product lines from Check Point, including CloudGuard Network, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark Appliances.
SOURCES
Other Check Point flaws
- CVE-2026-93616: Check Point Multiple Products Path Traversal Vulnerability
- CVE-2026-85102: Check Point Multiple Products Improper Certificate Validation Vulnerability
- CVE-2026-16232: Check Point SmartConsole Improper Authentication Vulnerability
- CVE-2026-50751: Check Point Security Gateway Improper Authentication Vulnerability
Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.