Skip to content
Edition of Sunday, November 8, 2026
Daily CISO

The five-minute briefing for security leaders.

Security vendor · Firewalls and NGFW · in CISA KEV

Check Point Software Technologies in the CISA KEV catalog

CISA’s Known Exploited Vulnerabilities catalog lists 5 entries for Check Point Software Technologies as of catalog version 2026.11.06, released November 6, 2026. The newest was added September 22, 2026, and the latest federal due date is September 25, 2026. CISA marks 2 of them as known ransomware use.

Updated

entries in the catalog
5
newest addition
September 22, 2026
latest federal due date
September 25, 2026
marked known ransomware use
2

Directory record

Website
www.checkpoint.com
Categories
Firewalls and NGFW (primary), SASE and SSE, Email security, EDR and XDR
Headquarters
Tel Aviv, Israel
Founded
1993
Ownership
Public (NASDAQ: CHKP)
Company record
Check Point Software Technologies on CISO Tribune

Directory data as of November 8, 2026. What the company sells, and the source for every fact, is on its CISO Tribune page.

KEV entries, newest first

Filed by CISA under the name “Check Point”. Each row links to the CVE’s NVD record; entries added in the last 45 days also link to their place on must-patch. The due date is CISA’s remediation deadline for federal civilian agencies, as the feed states it.

  1. Added September 22, 2026

    CVE-2026-93616 Check Point Multiple Products Path Traversal Vulnerability

    Multiple Products

    Due September 25, 2026

  2. Added September 22, 2026

    CVE-2026-85102 Check Point Multiple Products Improper Certificate Validation Vulnerability

    Multiple Products

    Due September 25, 2026

  3. Added July 22, 2026

    CVE-2026-16232 Check Point SmartConsole Improper Authentication Vulnerability

    SmartConsole

    Due July 25, 2026

  4. Added June 8, 2026

    CVE-2026-50751 Check Point Security Gateway Improper Authentication Vulnerability

    Security Gateway · known ransomware use

    Due June 11, 2026

  5. Added May 30, 2024

    CVE-2024-24919 Check Point Quantum Security Gateways Information Disclosure Vulnerability

    Quantum Security Gateways · known ransomware use

    Due June 20, 2024

Snapshot of CISA’s feed taken November 7, 2026; the whole catalog is counted on the KEV tracker.

On Daily CISO, newest first

  1. Daily briefing · November 4, 2026

    Check Point Names Ex-Fidelity CISO Adam Ely Chief Business Officer

  2. Daily briefing · September 27, 2026

    Check Point management servers were exploited for two months before a fix

  3. Weekly archive · Jul 20 – Jul 26, 2026

    CISA Adds Check Point and SharePoint Flaws to KEV Catalog

  4. Weekly archive · Jun 8 – Jun 14, 2026

    CISA Adds BerriAI LiteLLM and Check Point Gateway Bugs to KEV Catalog

  5. Weekly archive · Jul 22 – Jul 28, 2024

    Check Point Names Nadav Zafrir CEO as Security Executive Moves Continue

  6. Weekly archive · May 27 – Jun 2, 2024

    CISA Adds Check Point and Linux Kernel Flaws to Exploited Vulnerabilities Catalog

Sources

  1. Cybersecurity and Infrastructure Security Agency, KEV catalog · primary source
  2. Cybersecurity and Infrastructure Security Agency, KEV JSON feed (catalog version 2026.11.06), published November 6, 2026 · primary source
  3. CISO Tribune, vendor directory record for Check Point Software Technologies, published November 8, 2026