{"id":"CVE-2026-107484","kind":"vulnerability","aliases":["CVE-2026-107484"],"related":[],"title":"Check Point Gaia Portal: non-admin users can run admin-only operations","description":"An input and authorization validation vulnerability in Gaia Portal backend handlers could allow an authenticated, non-administrative user to perform privileged operations that should be restricted to administrators.","summary":"Gaia Portal backend handlers fail to validate input and authorization properly. An authenticated user without administrator rights can perform privileged operations reserved for administrators.","severity":"high","cvss":7.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["check-point","firewall","gaia-portal","infrastructure"],"not_affected_if":["no-non-admin-accounts"],"how_to_check":"Check Point has not published an advisory for this CVE yet (not on support.checkpoint.com/security-advisories as of 2026-11-12), so affected versions are unknown. Meanwhile: list Gaia users with non-admin roles (Gaia Portal > User Management > Users) and check which hosts can reach Gaia Portal (System Management > Host Access > Allowed Hosts). Do not confuse with CVE-2026-62145 (sk185153), a different Gaia Portal bug.","fix":null,"status":"open","published_at":"2026-11-12T14:17:22+00:00","first_seen_at":"2026-11-12T14:38:36+00:00","triaged_at":"2026-11-12T14:39:05+00:00","updated_at":"2026-11-12T14:41:00+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-12T14:39:05Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Check Point Gaia Portal: non-admin users can run admin-only operations","impact":"high","summary":"Gaia Portal backend handlers fail to validate input and authorization properly. An authenticated user without administrator rights can perform privileged operations reserved for administrators.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["check-point","gaia-portal","firewall"],"confidence":0.4,"fix_status":"unknown","needs_auth":"yes","worst_case":"low-privileged account performs administrator-only actions on the gateway","analyst_note":"Check Point advisory for CVE-2026-107484: affected Gaia versions, hotfix or fixed build, and whether Gaia Portal must be reachable from the network.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-non-admin-accounts"],"who_is_affected":"Organizations running Check Point Gaia Portal, the web management interface on Check Point gateways, where non-administrative accounts exist. The sources do not name affected versions or configurations. Systems without Gaia Portal or without non-admin accounts are not exposed.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.00068,"input_tokens":4511,"output_tokens":457,"severity_before":"high"},"analyst_status":"done","analyst_note":"Check Point advisory for CVE-2026-107484: affected Gaia versions, hotfix or fixed build, and whether Gaia Portal must be reachable from the network.","search":"'-107484':17A,20A '-2026':16A,19A 'admin':7A,12A 'admin-on':11A 'administr':44B,52B,70C,81C 'allow':65C 'authent':41B,67C 'author':38B,56C 'backend':31B,62C 'check':1A,22B 'check-point':21B 'could':64C 'cve':15A,18A 'fail':33B 'firewal':24B 'gaia':3A,26B,29B,60C 'gaia-port':25B 'handler':32B,63C 'infrastructur':28B 'input':36B,54C 'non':6A,69C 'non-admin':5A 'non-administr':68C 'oper':14A,49B,75C 'perform':47B,73C 'point':2A,23B 'portal':4A,27B,30B,61C 'privileg':48B,74C 'proper':39B 'reserv':50B 'restrict':79C 'right':45B 'run':10A 'user':8A,42B,71C 'valid':35B,57C 'vulner':58C 'without':43B","nicknames":[],"mitigations":[],"who_affected":"Teams running Check Point Gaia (the OS on Check Point gateways and management servers) with the Gaia Portal web interface enabled and non-administrator accounts that can log in. Per the CVSS vector from Check Point (AV:A, PR:L) the attacker must be on an adjacent network and hold a valid low-privilege login. Affected versions are not published yet. Systems with no non-admin Gaia accounts, or with Portal access limited to trusted admin hosts, are less exposed.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["checkpoint","firewall","gaiaportal","high","infrastructure"],"campaign_type":null,"search_a":"'-107484':17A,20A '-2026':16A,19A 'admin':7A,12A 'admin-on':11A 'check':1A 'cve':15A,18A 'gaia':3A 'non':6A 'non-admin':5A 'oper':14A 'point':2A 'portal':4A 'run':10A 'user':8A","search_b":"'administr':44B,52B 'authent':41B 'author':38B 'backend':31B 'check':22B 'check-point':21B 'fail':33B 'firewal':24B 'gaia':26B,29B 'gaia-port':25B 'handler':32B 'infrastructur':28B 'input':36B 'oper':49B 'perform':47B 'point':23B 'portal':27B,30B 'privileg':48B 'proper':39B 'reserv':50B 'right':45B 'user':42B 'valid':35B 'without':43B","search_c":"'administr':70C,81C 'allow':65C 'authent':67C 'author':56C 'backend':62C 'could':64C 'gaia':60C 'handler':63C 'input':54C 'non':69C 'non-administr':68C 'oper':75C 'perform':73C 'portal':61C 'privileg':74C 'restrict':79C 'user':71C 'valid':57C 'vulner':58C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-12T14:17:22+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cvss_by":"cve@checkpoint.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-107484","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107484","severity":null,"published_at":"2026-11-12T14:17:22+00:00","modified_at":"2026-11-12T14:17:22+00:00","first_seen_at":"2026-11-12T14:38:36+00:00","fetched_at":"2026-11-12T14:38:36+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-107484:3744","url":null,"severity":null,"published_at":"2026-11-12T14:41:00+00:00","modified_at":"2026-11-12T14:41:00+00:00","first_seen_at":"2026-11-12T14:41:00+00:00","fetched_at":"2026-11-12T14:41:00+00:00","note":"No Check Point sk found for CVE-2026-107484; only NVD. Vendor index (checked 2026-11-12) lists no entry. Do not mix with CVE-2026-62145/sk185153. Fix and versions unknown; fix_status none set by triage is unsupported by a vendor page, so left unverified. Revisit when Check Point publishes the sk."}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}