Vulnerability-Lookup

WID-SEC-W-2026-4562

Vulnerability from csaf_certbund - Published: 2026-11-12 23:00 - Updated: 2026-11-12 23:00

Summary

Check Point Security Management und Security Gateway: Mehrere Schwachstellen ermöglichen Erlangen von Administratorrechten

Severity

Hoch

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Eine vereinheitlichte Plattform zur Verwaltung von Sicherheitsrichtlinien, Überwachung des Netzwerkverkehrs und Bereitstellung von Sicherheits-Gateways in der Infrastruktur einer Organisation. Check Point Security Gateway ist eine "Next Generation Firewall" Produktfamilie.

Angriff: Ein Angreifer kann mehrere Schwachstellen in Check Point Security Management und Check Point Security Gateway ausnutzen, um Administratorrechte zu erlangen.

Betroffene Betriebssysteme: - Appliance - Sonstiges

CVE-2026-107484

Affected products

Known affected 8 products

Product	Identifier	Version	Remediation
Check Point Security Gateway <R82.20 Check Point / Security Gateway		<R82.20
Check Point Security Management R81.20 <Take 174 Check Point / Security Management		R81.20 <Take 174
Check Point Security Gateway R82.10 <Take 52 Check Point / Security Gateway		R82.10 <Take 52
Check Point Security Gateway R81.20 <Take 174 Check Point / Security Gateway		R81.20 <Take 174
Check Point Security Gateway R82 <Take 132 Check Point / Security Gateway		R82 <Take 132
Check Point Security Management <R82.20 Check Point / Security Management		<R82.20
Check Point Security Management R82.10 <Take 52 Check Point / Security Management		R82.10 <Take 52
Check Point Security Management R82 <Take 132 Check Point / Security Management		R82 <Take 132

CVE-2026-123039

Affected products

Known affected 10 products

Product	Identifier	Version	Remediation
Check Point Security Management R82.20 <Take 14 Check Point / Security Management		R82.20 <Take 14
Check Point Security Gateway R82.20 <Take 14 Check Point / Security Gateway		R82.20 <Take 14
Check Point Security Gateway <R82.20 Check Point / Security Gateway		<R82.20
Check Point Security Management R81.20 <Take 174 Check Point / Security Management		R81.20 <Take 174
Check Point Security Gateway R82.10 <Take 52 Check Point / Security Gateway		R82.10 <Take 52
Check Point Security Gateway R81.20 <Take 174 Check Point / Security Gateway		R81.20 <Take 174
Check Point Security Gateway R82 <Take 132 Check Point / Security Gateway		R82 <Take 132
Check Point Security Management <R82.20 Check Point / Security Management		<R82.20
Check Point Security Management R82.10 <Take 52 Check Point / Security Management		R82.10 <Take 52
Check Point Security Management R82 <Take 132 Check Point / Security Management		R82 <Take 132

References

4 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://support.checkpoint.com/results/sk/sk1000362	external
https://support.checkpoint.com/results/sk/sk1000291	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Eine vereinheitlichte Plattform zur Verwaltung von Sicherheitsrichtlinien, \u00dcberwachung des Netzwerkverkehrs und Bereitstellung von Sicherheits-Gateways in der Infrastruktur einer Organisation.\r\nCheck Point Security Gateway ist eine \"Next Generation Firewall\" Produktfamilie.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in Check Point Security Management und Check Point Security Gateway ausnutzen, um Administratorrechte zu erlangen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Appliance\n- Sonstiges",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-4562 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-4562.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-4562 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4562"
      },
      {
        "category": "external",
        "summary": "Check Point Security Advisory sk1000362 vom 2026-11-12",
        "url": "https://support.checkpoint.com/results/sk/sk1000362"
      },
      {
        "category": "external",
        "summary": "Check Point Security Advisory sk1000291 vom 2026-11-12",
        "url": "https://support.checkpoint.com/results/sk/sk1000291"
      }
    ],
    "source_lang": "en-US",
    "title": "Check Point Security Management und Security Gateway: Mehrere Schwachstellen erm\u00f6glichen Erlangen von Administratorrechten",
    "tracking": {
      "current_release_date": "2026-11-12T23:00:00.000+00:00",
      "generator": {
        "date": "2026-11-13T13:22:51.545+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.7.0"
        }
      },
      "id": "WID-SEC-W-2026-4562",
      "initial_release_date": "2026-11-12T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-11-12T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cR82.20",
                "product": {
                  "name": "Check Point Security Gateway \u003cR82.20",
                  "product_id": "T063126"
                }
              },
              {
                "category": "product_version",
                "name": "R82.20",
                "product": {
                  "name": "Check Point Security Gateway R82.20",
                  "product_id": "T063126-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:checkpoint:security_gateway:r82.20"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "R82.10 \u003cTake 52",
                "product": {
                  "name": "Check Point Security Gateway R82.10 \u003cTake 52",
                  "product_id": "T063127"
                }
              },
              {
                "category": "product_version",
                "name": "R82.10 Take 52",
                "product": {
                  "name": "Check Point Security Gateway R82.10 Take 52",
                  "product_id": "T063127-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:checkpoint:security_gateway:r82.10__take_52"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "R82 \u003cTake 132",
                "product": {
                  "name": "Check Point Security Gateway R82 \u003cTake 132",
                  "product_id": "T063128"
                }
              },
              {
                "category": "product_version",
                "name": "R82 Take 132",
                "product": {
                  "name": "Check Point Security Gateway R82 Take 132",
                  "product_id": "T063128-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:checkpoint:security_gateway:r82__take_132"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "R82.20 \u003cTake 14",
                "product": {
                  "name": "Check Point Security Gateway R82.20 \u003cTake 14",
                  "product_id": "T063132"
                }
              },
              {
                "category": "product_version",
                "name": "R82.20 Take 14",
                "product": {
                  "name": "Check Point Security Gateway R82.20 Take 14",
                  "product_id": "T063132-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:checkpoint:security_gateway:r82.20__take_14"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "R81.20 \u003cTake 174",
                "product": {
                  "name": "Check Point Security Gateway R81.20 \u003cTake 174",
                  "product_id": "T063138"
                }
              },
              {
                "category": "product_version",
                "name": "R81.20 Take 174",
                "product": {
                  "name": "Check Point Security Gateway R81.20 Take 174",
                  "product_id": "T063138-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:checkpoint:security_gateway:r81.20__take_174"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Security Gateway"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cR82.20",
                "product": {
                  "name": "Check Point Security Management \u003cR82.20",
                  "product_id": "T063122"
                }
              },
              {
                "category": "product_version",
                "name": "R82.20",
                "product": {
                  "name": "Check Point Security Management R82.20",
                  "product_id": "T063122-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:checkpoint:security_management:r82.20"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "R82.20 \u003cTake 14",
                "product": {
                  "name": "Check Point Security Management R82.20 \u003cTake 14",
                  "product_id": "T063130"
                }
              },
              {
                "category": "product_version",
                "name": "R82.20 Take 14",
                "product": {
                  "name": "Check Point Security Management R82.20 Take 14",
                  "product_id": "T063130-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:checkpoint:security_management:r82.20__take_14"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "R82.10 \u003cTake 52",
                "product": {
                  "name": "Check Point Security Management R82.10 \u003cTake 52",
                  "product_id": "T063133"
                }
              },
              {
                "category": "product_version",
                "name": "R82.10 Take 52",
                "product": {
                  "name": "Check Point Security Management R82.10 Take 52",
                  "product_id": "T063133-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:checkpoint:security_management:r82.10__take_52"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "R82 \u003cTake 132",
                "product": {
                  "name": "Check Point Security Management R82 \u003cTake 132",
                  "product_id": "T063134"
                }
              },
              {
                "category": "product_version",
                "name": "R82 Take 132",
                "product": {
                  "name": "Check Point Security Management R82 Take 132",
                  "product_id": "T063134-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:checkpoint:security_management:r82__take_132"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "R81.20 \u003cTake 174",
                "product": {
                  "name": "Check Point Security Management R81.20 \u003cTake 174",
                  "product_id": "T063137"
                }
              },
              {
                "category": "product_version",
                "name": "R81.20 Take 174",
                "product": {
                  "name": "Check Point Security Management R81.20 Take 174",
                  "product_id": "T063137-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:checkpoint:security_management:r81.20__take_174"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Security Management"
          }
        ],
        "category": "vendor",
        "name": "Check Point"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-107484",
      "product_status": {
        "known_affected": [
          "T063126",
          "T063137",
          "T063127",
          "T063138",
          "T063128",
          "T063122",
          "T063133",
          "T063134"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-107484"
    },
    {
      "cve": "CVE-2026-123039",
      "product_status": {
        "known_affected": [
          "T063130",
          "T063132",
          "T063126",
          "T063137",
          "T063127",
          "T063138",
          "T063128",
          "T063122",
          "T063133",
          "T063134"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-123039"
    }
  ]
}

CVE-2026-107484 (GCVE-0-2026-107484)

Vulnerability from cvelistv5 – Published: 2026-11-12 14:01 – Updated: 2026-11-12 14:01

Title

Input Validation Vulnerability in Gaia Portal backend handlers allows privilege escalation by an authenticated user

Summary

An input and authorization validation vulnerability in Gaia Portal backend handlers could allow an authenticated, non-administrative user to perform privileged operations that should be restricted to administrators.

Severity

7.3 (High)


                        
                          CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

CWE

CWE-269 - Improper Privilege Management.

Assigner

checkpoint CNA under the mitre root

CNA scorecard C 66/100 over 20 records in the last 180 days details

References

1 reference

URL	Tags
https://support.checkpoint.com/results/sk/sk1000291

Impacted products

2 products

Vendor	Product	Version
checkpoint	Quantum Security Gateway	Affected: R82.10 with Jumbo Hotfix Take 50 or below Affected: R82 with Jumbo Hotfix Take 130 or below Affected: R81.20 with Jumbo Hotfix Take 173 or below
checkpoint	Quantum Security Management	Affected: R82.10 with Jumbo Hotfix Take 50 or below Affected: R82 with Jumbo Hotfix Take 130 or below Affected: R81.20 with Jumbo Hotfix Take 173 or below

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Quantum Security Gateway",
          "vendor": "checkpoint",
          "versions": [
            {
              "status": "affected",
              "version": "R82.10 with Jumbo Hotfix Take 50 or below"
            },
            {
              "status": "affected",
              "version": "R82 with Jumbo Hotfix Take 130 or below"
            },
            {
              "status": "affected",
              "version": "R81.20 with Jumbo Hotfix Take 173 or below"
            }
          ]
        },
        {
          "product": "Quantum Security Management",
          "vendor": "checkpoint",
          "versions": [
            {
              "status": "affected",
              "version": "R82.10 with Jumbo Hotfix Take 50 or below"
            },
            {
              "status": "affected",
              "version": "R82 with Jumbo Hotfix Take 130 or below"
            },
            {
              "status": "affected",
              "version": "R81.20 with Jumbo Hotfix Take 173 or below"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An input and authorization validation vulnerability in Gaia Portal backend handlers could allow an authenticated, non-administrative user to perform privileged operations that should be restricted to administrators."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-269",
              "description": "CWE-269: Improper Privilege Management.",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-12T14:01:05.395Z",
        "orgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
        "shortName": "checkpoint"
      },
      "references": [
        {
          "url": "https://support.checkpoint.com/results/sk/sk1000291"
        }
      ],
      "title": "Input Validation Vulnerability in Gaia Portal backend handlers allows privilege escalation by an authenticated user",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
    "assignerShortName": "checkpoint",
    "cveId": "CVE-2026-107484",
    "datePublished": "2026-11-12T14:01:05.395Z",
    "dateReserved": "2026-10-08T08:05:06.814Z",
    "dateUpdated": "2026-11-12T14:01:05.395Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-123039 (GCVE-0-2026-123039)

Vulnerability from cvelistv5 – Published: 2026-11-12 14:02 – Updated: 2026-11-13 16:27

Title

Local privilege escalation to root in the DynamicCLI daemon via local world-writable control socket

Summary

The Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket (/tmp/dynamic_socket) without authenticating connecting processes. An authenticated local user can send a command to the socket and have it executed as root.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-11-13 11:43 UTC

CWE

CWE-862 - Missing Authorization.
CWE-732 - Incorrect Permission Assignment for Critical Resource.

Assigner

checkpoint CNA under the mitre root

CNA scorecard C 66/100 over 20 records in the last 180 days details

References

1 reference

URL	Tags
https://support.checkpoint.com/results/sk/sk1000362

Impacted products

2 products

Vendor	Product	Version
checkpoint	Quantum Security Gateway	Affected: R82.10 with Jumbo Hotfix Take 50 or below Affected: R82.20 with Jumbo Hotfix Take 10 or below Affected: R82 with Jumbo Hotfix Take 130 or below Affected: R81.20 with Jumbo Hotfix Take 173 or below
checkpoint	Quantum Security Management	Affected: R82.10 with Jumbo Hotfix Take 50 or below Affected: R82.20 with Jumbo Hotfix Take 10 or below Affected: R82 with Jumbo Hotfix Take 130 or below Affected: R81.20 with Jumbo Hotfix Take 173 or below

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-123039",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-11-13T11:43:47.126754Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-11-13T16:27:35.594Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Quantum Security Gateway",
          "vendor": "checkpoint",
          "versions": [
            {
              "status": "affected",
              "version": "R82.10 with Jumbo Hotfix Take 50 or below"
            },
            {
              "status": "affected",
              "version": "R82.20 with Jumbo Hotfix Take 10 or below"
            },
            {
              "status": "affected",
              "version": "R82 with Jumbo Hotfix Take 130 or below"
            },
            {
              "status": "affected",
              "version": "R81.20 with Jumbo Hotfix Take 173 or below"
            }
          ]
        },
        {
          "product": "Quantum Security Management",
          "vendor": "checkpoint",
          "versions": [
            {
              "status": "affected",
              "version": "R82.10 with Jumbo Hotfix Take 50 or below"
            },
            {
              "status": "affected",
              "version": "R82.20 with Jumbo Hotfix Take 10 or below"
            },
            {
              "status": "affected",
              "version": "R82 with Jumbo Hotfix Take 130 or below"
            },
            {
              "status": "affected",
              "version": "R81.20 with Jumbo Hotfix Take 173 or below"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket (/tmp/dynamic_socket) without authenticating connecting processes. An authenticated local user can send a command to the socket and have it executed as root."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-862",
              "description": "CWE-862: Missing Authorization.",
              "lang": "en",
              "type": "CWE"
            },
            {
              "cweId": "CWE-732",
              "description": "CWE-732: Incorrect Permission Assignment for Critical Resource.",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-12T14:02:13.665Z",
        "orgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
        "shortName": "checkpoint"
      },
      "references": [
        {
          "url": "https://support.checkpoint.com/results/sk/sk1000362"
        }
      ],
      "title": "Local privilege escalation to root in the DynamicCLI daemon via local world-writable control socket",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
    "assignerShortName": "checkpoint",
    "cveId": "CVE-2026-123039",
    "datePublished": "2026-11-12T14:02:13.665Z",
    "dateReserved": "2026-11-05T07:30:18.138Z",
    "dateUpdated": "2026-11-13T16:27:35.594Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

WID-SEC-W-2026-4562

CVE-2026-107484 (GCVE-0-2026-107484)

CVE-2026-123039 (GCVE-0-2026-123039)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour