CVE-2024-24919

8.6 highKEVEPSS 100%

High (8.6) in Check Point Quantum Security Gateways. In CISA KEV since 2024-05-30, with known ransomware use. EPSS 100% chance of exploitation in the next 30 days.

Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.

Severity

CVSS 3.1

8.6 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

EPSS: 100% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CISA KEV: listed 2024-05-30, due 2024-06-20, known ransomware use
CWE: CWE-200
Published: 2024-05-28
Modified: 2026-08-05
Record from: the NVD, synced 2026-10-19

Affected

checkpoint:cloudguard_network_security
checkpoint:quantum_security_gateway_firmware
checkpoint:quantum_spark_firmware

References

https://support.checkpoint.com/results/sk/sk182336
https://support.checkpoint.com/results/sk/sk182336
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-24919
https://www.mnemonic.io/resources/blog/advisory-check-point-remote-access-vpn-vulnerability-cve-2024-24919/

Check your stack JSON