CVE-2026-62145

Think of Gaia Portal as the “control room” for your security products. This flaw lets someone who only has basic “read-only” access to that control room take over the whole system and run powerful commands as the top-level administrator.

In practical terms, it’s like giving a staff member a clipboard (read-only view) and having them find a way to turn it into the keys that unlock the entire building’s security controls.

This matters if you run Check Point “quantum security gateway” or “quantum security management” and those systems expose Gaia Portal to the network.

If an attacker can reach the management interface and obtain read-only Gaia Portal access, they can escalate to root and run arbitrary commands.

This is only a risk when the attacker can reach the relevant network endpoint(s) and gain that low-level Gaia Portal access (or otherwise get into the required access state).

Red: exploitation has been reported, and the vulnerability can lead directly to root-level command execution. Attackers only need low-level Gaia Portal access (read-only) and network reachability, with no user action required.

Even though a public patch is not yet provided in the available information, you should prioritize containment (restrict reachability and remove/limit Gaia Portal accounts) immediately.