CVE-2026-62145

—

CVSS 3.1

7.5 high

EPSS

8%p94

Published

Jul 22, 2026 (Jul 22, 2026)

Modified

Jul 24, 2026

Description

A vulnerability in Check Point Gaia Portal allows an authenticated attacker with read-only Gaia Portal privileges to execute commands with root privileges.

Weakness: CWE-269
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (7.6%)

In the news4 stories

Attackers exploit critical Check Point flaw to take over firewall management (CVE-2026-16232)

Help Net SecurityJul 30, 15:25 UTC · Jul 30, 2026Vulnerability in the wildCVE-2026-16232 CVE-2026-62144 CVE-2026-62145

60

⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More

The Hacker NewsJul 28, 05:26 UTC · Jul 28, 2026Exploit / PoC in the wildCVE-2026-16232 CVE-2025-66376 CVE-2026-54121+52 CVEs

60

Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access

The Hacker NewsJul 24, 09:25 UTC · Jul 24, 2026Vulnerability in the wildCVE-2026-16232 CVE-2026-62144 CVE-2026-62145

60

Check Point patches actively exploited SmartConsole authentication bypass flaw

Security AffairsJul 23, 08:33 UTC · Jul 23, 2026Vulnerability in the wildCVE-2026-16232 CVE-2026-62144 CVE-2026-62145

60