Back to CVE Browser

CVE-2024-24919

🔥 Known Exploited (CISA KEV)HIGH

8.6

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2024-05-28

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.

Affected Platforms (CPE)

💻

Checkpoint

Quantum Spark Firmware

= r80.40= r81= r81.10= r80.20

💻

Checkpoint

Quantum Security Gateway Firmware

= r80.40= r81.20= r81.10= r81

📦

Checkpoint

Cloudguard Network Security

= r80.40= r81= r81.10= r81.20

References & Advisories

🔗 https://support.checkpoint.com/results/sk/sk182336

🔗 https://support.checkpoint.com/results/sk/sk182336

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-24919

🔗 https://www.mnemonic.io/resources/blog/advisory-check-point-remote-access-vpn-vulnerability-cve-2024-24919/

Related Security Intelligence Articles

Weekly Cybersecurity News: Jul 27, 2026

Weekly cybersecurity news covering active exploitation of Check Point SmartConsole CVE-2026-16232, Qilin ransomware leveraging PAN-OS GlobalProtect vulnerabilities, Russian LAUNDRY BEAR targeting Zimbra email servers, and FakeGit malicious repositories.

Global Cyber Intel Digest: July 24, 2026

This digest covers active exploitation of Check Point CVE-2026-16232 SmartConsole authentication bypass, Russian LAUNDRY BEAR targeting Zimbra vulnerabilities, malicious Claude Desktop ad campaigns deploying SectopRAT, and Chaos ransomware msaRAT operations.

Related Vulnerabilities

CVE-2026-658937.0

This vulnerability exists in CP PLUS EZ-P21 IP Camera due to an insecure debug feature enabled in the firmware. An attacker with ...

CVE-2026-174592.1

A vulnerability was determined in perwendel spark up to 2.9.4. This vulnerability affects the function staticFiles.externalLocatio...

CVE-2026-645208.4

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies The ...

CVE-2026-645168.8

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets The VCP...