Check Point Gaia Embedded vulnerabilities

2 CVEs affecting Check Point Gaia Embedded, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-85102, published 2026-09-09.

More from Check Point.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-50751: Check Point Security Gateway Improper Authentication Vulnerability, published 2026-06-08. Critical severity, CVSS 9.3. Actively exploited: in CISA KEV since 2026-06-08. EPSS: 85.3% chance of exploitation in the next 30 days. A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish…
• CVE-2026-85102: Check Point Multiple Products Improper Certificate Validation Vulnerability, published 2026-09-09. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2026-09-22. EPSS: 50.4% chance of exploitation in the next 30 days. Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.