Check Point Quantum Security Gateways Information Disclosure Vulnerability

Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several product lines from Check Point, including CloudGuard Network, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark Appliances.

Published 31 Jul 2026Updated 31 Jul 202657 sources
CVSS 0.0 PoC CANDIDATE△ CISA KEV

What happened

Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several product lines from Check Point, including CloudGuard Network, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark Appliances.

Affected versions

Quantum Security Gateways: See original advisory Fixed: See vendor advisory.

Why it matters

This source correlation may provide earlier visibility while structured CVE metadata is still being updated.

Detection & mitigation

  • Review the original advisory and validate affected versions.
  • Apply vendor-provided updates or mitigations when available.

Public PoC references

RepositoryAuthorFirst seenReference
PoC-in-GitHub · c3rrberu5/CVE-2024-24919Nuclei Template to discover CVE-2024-24919. A path traversal vulnerability in CheckPoint SSLVPN.★ 7c3rrberu52024-05-30CandidatePoC-in-GitHub · emanueldosreis/CVE-2024-24919POC exploit for CVE-2024-24919 information leakage★ 5emanueldosreis2024-05-30CandidatePoC-in-GitHub · hendprw/CVE-2024-24919★ 0hendprw2024-05-30CandidatePoC-in-GitHub · LucasKatashi/CVE-2024-24919CVE-2024-24919 Exploit PoC★ 12LucasKatashi2024-05-30CandidatePoC-in-GitHub · Bytenull00/CVE-2024-24919Quick and simple script that takes as input a file with multiple URLs to check for the CVE-2024-24919 vulnerability in CHECKPOINT★ 3Bytenull002024-05-30CandidatePoC-in-GitHub · am-eid/CVE-2024-24919★ 0am-eid2024-05-30CandidatePoC-in-GitHub · P3wc0/CVE-2024-24919★ 0P3wc02024-05-31CandidatePoC-in-GitHub · zam89/CVE-2024-24919Simple POC Python script that check & leverage Check Point CVE-2024-24919 vulnerability (Wrong Check Point)★ 4zam892024-05-31CandidatePoC-in-GitHub · satriarizka/CVE-2024-24919A simple bash and python script to check for the vulnerability CVE-2024-24919★ 1satriarizka2024-05-31CandidatePoC-in-GitHub · RevoltSecurities/CVE-2024-24919An Vulnerability detection and Exploitation tool for CVE-2024-24919★ 25RevoltSecurities2024-05-31CandidatePoC-in-GitHub · Vulnpire/CVE-2024-24919★ 0Vulnpire2024-05-31CandidatePoC-in-GitHub · seed1337/CVE-2024-24919-POC★ 47seed13372024-05-31CandidatePoC-in-GitHub · 0xYumeko/CVE-2024-24919★ 10xYumeko2024-05-31CandidatePoC-in-GitHub · GraySignal/CVE-2024-24919-Check-Point-Remote-Access-VPN★ 1GraySignal2024-05-31CandidatePoC-in-GitHub · smackerdodi/CVE-2024-24919-nuclei-templaterNuclei template for CVE-2024-24919★ 5smackerdodi2024-05-31CandidatePoC-in-GitHub · GoatSecurity/CVE-2024-24919CVE-2024-24919 exploit★ 20GoatSecurity2024-05-31CandidatePoC-in-GitHub · GlobalsecureAcademy/CVE-2024-24919Exploit tool to validate CVE-2024-24919 vulnerability on Checkpoint Firewall VPNs★ 3GlobalsecureAcademy2024-05-31CandidatePoC-in-GitHub · nexblade12/CVE-2024-24919★ 1nexblade122024-05-31CandidatePoC-in-GitHub · un9nplayer/CVE-2024-24919This repository contains a proof-of-concept (PoC) exploit for CVE-2024-24919, a critical vulnerability discovered in Check Point SVN. The vulnerability allows for reading system files. CVE ID: CVE-2024-24919★ 16un9nplayer2024-05-31CandidatePoC-in-GitHub · 0xkalawy/CVE-2024-24919★ 00xkalawy2024-05-31CandidatePoC-in-GitHub · Cappricio-Securities/CVE-2024-24919Check Point Security Gateway (LFI)★ 2Cappricio-Securities2024-06-01CandidatePoC-in-GitHub · fernandobortotti/CVE-2024-24919★ 1fernandobortotti2024-06-01CandidatePoC-in-GitHub · YN1337/CVE-2024-24919Mass scanner for CVE-2024-24919★ 0YN13372024-06-01CandidatePoC-in-GitHub · ifconfig-me/CVE-2024-24919-Bulk-ScannerCVE-2024-24919 [Check Point Security Gateway Information Disclosure]★ 31ifconfig-me2024-06-01CandidatePoC-in-GitHub · r4p3c4/CVE-2024-24919-Checkpoint-Firewall-VPN-CheckEsta herramienta se utiliza para validar la vulnerabilidad CVE-2024-24919 en las VPN de Checkpoint Firewall★ 1r4p3c42024-06-01CandidatePoC-in-GitHub · r4p3c4/CVE-2024-24919-Exploit-PoC-Checkpoint-Firewall-VPNHerramienta de explotación para explotar la vulnerabilidad CVE-2024-24919 en las VPN de Checkpoint Firewall★ 2r4p3c42024-06-01CandidatePoC-in-GitHub · J4F9S5D2Q7/CVE-2024-24919-CHECKPOINT★ 0J4F9S5D2Q72024-06-02CandidatePoC-in-GitHub · mr-kasim-mehar/CVE-2024-24919-Exploit★ 1mr-kasim-mehar2024-06-02CandidatePoC-in-GitHub · Expl0itD0g/CVE-2024-24919---Poca Proof of Concept of CVE-2024-24919★ 0Expl0itD0g2024-06-02CandidatePoC-in-GitHub · bigb0x/CVE-2024-24919-SniperCVE-2024-24919 Sniper - A powerful tool for scanning Check Point Security Gateway CVE-2024-24919 vulnerability. Supports single & bulk scanning, multithreading, and generates detailed CSV reports. Ideal for penetration testers and security researchers.★ 3bigb0x2024-06-02CandidatePoC-in-GitHub · birdlex/cve-2024-24919-checker★ 1birdlex2024-06-03CandidatePoC-in-GitHub · Rug4lo/CVE-2024-24919-ExploitCVE-2024-24919 Exploit and PoC - Critical LFI for Remote Access VPN or Mobile Access.★ 3Rug4lo2024-06-03CandidatePoC-in-GitHub · 0nin0hanz0/CVE-2024-24919-PoC★ 120nin0hanz02024-06-03CandidatePoC-in-GitHub · GuayoyoCyber/CVE-2024-24919Nmap script to check vulnerability CVE-2024-24919★ 4GuayoyoCyber2024-06-03CandidatePoC-in-GitHub · 0xans/CVE-2024-24919★ 10xans2024-06-04CandidatePoC-in-GitHub · Tim-Hoekstra/CVE-2024-24919★ 0Tim-Hoekstra2024-06-04CandidatePoC-in-GitHub · starlox0/CVE-2024-24919-POCA Simple Exploit Code(POC) to Automate CVE-2024–24919★ 1starlox02024-06-06CandidatePoC-in-GitHub · nullcult/CVE-2024-24919-ExploitCVE-2024-24919 exploit that checks more files for better visibility★ 0nullcult2024-06-07CandidatePoC-in-GitHub · satchhacker/cve-2024-24919★ 0satchhacker2024-06-08CandidatePoC-in-GitHub · verylazytech/CVE-2024-24919POC - CVE-2024–24919 - Check Point Security Gateways★ 9verylazytech2024-06-09CandidatePoC-in-GitHub · SalehLardhi/CVE-2024-24919★ 1SalehLardhi2024-06-11CandidatePoC-in-GitHub · H3KEY/CVE-2024-24919Hello everyone, I am sharing a modified script from CVE-2024-24919 which can extract paths categorized as critical.★ 0H3KEY2024-07-22CandidatePoC-in-GitHub · Jutrm/cve-2024-24919★ 0Jutrm2024-07-26CandidatePoC-in-GitHub · LuisMateo1/Arbitrary-File-Read-CVE-2024-24919★ 0LuisMateo12024-08-29CandidatePoC-in-GitHub · AhmedMansour93/Event-ID-263-Rule-Name-SOC287---Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-🔍 Just wrapped up an incident report on a Phishing Alert (Event ID 257, SOC282). Enhancing my expertise in email threat detection and response! 🚨 #Cybersecurity #SOCAnalyst #LetsDefend★ 0AhmedMansour932024-08-31CandidatePoC-in-GitHub · geniuszly/CVE-2024-24919PoC script for CVE-2024-24919 vulnerability. It scans a list of target URLs to identify security issues by sending HTTP POST requests and analyzing server responses★ 6geniuszly2024-09-29CandidatePoC-in-GitHub · sar-3mar/CVE-2024-24919_POCIt's Proof of Concept on CVE-2024-24919-POC , i made it after it's discoverd★ 0sar-3mar2024-10-28CandidatePoC-in-GitHub · NingXin2002/Check-Point_pocCheck-Point安全网关任意文件读取漏洞(CVE-2024-24919)★ 2NingXin20022024-12-21CandidatePoC-in-GitHub · hashdr1ft/SOC_287SOC287 - Arbitrary File Read on Checkpoint Security Gateway [CVE-2024-24919]★ 1hashdr1ft2025-02-05CandidatePoC-in-GitHub · funixone/CVE-2024-24919---Exploit-Script★ 1funixone2025-02-21CandidatePoC-in-GitHub · SpiX-7/CVE-2024-24919-POC★ 0SpiX-72025-02-26CandidatePoC-in-GitHub · CyprianAtsyor/CVE-2024-24919-Incident-Report.md★ 0CyprianAtsyor2025-04-25CandidatePoC-in-GitHub · CyberBibs/Event-ID-263-Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-★ 0CyberBibs2025-06-08CandidatePoC-in-GitHub · MacUchegit/Detecting-and-Analyzing-CVE-2024-24919-Exploitation★ 0MacUchegit2025-07-12CandidatePoC-in-GitHub · Zedocun/Incident-Analysis-Response-Check-Point-Security-Gateway-CVE-2024-24919-LFI-ExploitationIncident Response (IR) case study documenting the investigation of an exploitation attempt targeting CVE-2024-24919 (Arbitrary File Read) on a Check Point Security Gateway. Includes comprehensive SIEM analysis, firewall logs, raw web access log inspection (`/var/log/access.log`), IOCs, MITRE ATT&CK mapping, and post-exploitation validation.★ 1Zedocun2026-08-01Candidate