CVE-2026-107484

HIGH
MEDIUM Priority: 0.14 BB Relevance: 50/100
Published: 2026-11-12 Modified: 2026-11-12 First seen: 2026-11-12 Status: active

Attack Surface

Adjacent Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: High
A: None

Description

An input and authorization validation vulnerability in Gaia Portal backend handlers could allow an authenticated, non-administrative user to perform privileged operations that should be restricted to administrators.

Weakness Classification (1)

Affected Software (6)

VendorProductVersion
checkpoint Quantum Security Gateway R82.10 with Jumbo Hotfix Take 50 or below
checkpoint Quantum Security Gateway R82 with Jumbo Hotfix Take 130 or below
checkpoint Quantum Security Gateway R81.20 with Jumbo Hotfix Take 173 or below
checkpoint Quantum Security Management R82.10 with Jumbo Hotfix Take 50 or below
checkpoint Quantum Security Management R82 with Jumbo Hotfix Take 130 or below
checkpoint Quantum Security Management R81.20 with Jumbo Hotfix Take 173 or below

Bug Bounty Relevance

50 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

7.3 / 10.0 v3.1
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS — Exploitation Probability

1.87%
Raw Score 0.018700
Percentile 79.7%
Date 2026-11-13

Intelligence Sources

mitre ref →
nvd ref →