CVE-2024-24919

ENISA EUVD: EUVD-2024-22282 ↗

Exploited in the Wild ✓ Confirmed 0-Day

Triaged: March 5, 2026 10 articles Published: 2024-05-28

VulnLookup ↗ NVD ↗ EUVD ↗ MITRE ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-24

94.39%

probability

This CVE has a 94.39% probability of being exploited in the next 30 days.

0% Top 100.0th percentile of all CVEs 100%

CVSS v3.1

Source: VulnerabilityLookup (CIRCL)

8.6

HIGH

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

None

Availability

None

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Description

VulnerabilityLookup (CNA)

Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.

Affected Products

checkpoint

Check Point Quantum Gateway, Spark Gateway and CloudGuard Network

Check Point Quantum Gateway and CloudGuard Network versions R81.20, R81.10, R81, R80.40 and Check Point Spark versions R81.10, R80.20.

Attack Intelligence

CWE-200 · Information Exposure CWE-664 · Improper Control of a Resource Through its Lifetime CWE-668 · Exposure of Resource to Wrong Sphere

Exploits & PoC

seed1337/CVE-2024-24919-POC

PoC CVE-2024-24919 — seed1337/CVE-2024-24919-POC

ifconfig-me/CVE-2024-24919-Bulk-Scanner

CVE-2024-24919 [Check Point Security Gateway Information Disclosure]

RevoltSecurities/CVE-2024-24919

An Vulnerability detection and Exploitation tool for CVE-2024-24919

GoatSecurity/CVE-2024-24919

CVE-2024-24919 exploit

un9nplayer/CVE-2024-24919

This repository contains a proof-of-concept (PoC) exploit for CVE-2024-24919, a critical vulnerability discovered in Check Point SVN. The vulnerabilit

LucasKatashi/CVE-2024-24919

CVE-2024-24919 Exploit PoC

0nin0hanz0/CVE-2024-24919-PoC

PoC CVE-2024-24919 — 0nin0hanz0/CVE-2024-24919-PoC

verylazytech/CVE-2024-24919

POC - CVE-2024–24919 - Check Point Security Gateways

geniuszly/CVE-2024-24919

PoC script for CVE-2024-24919 vulnerability. It scans a list of target URLs to identify security issues by sending HTTP POST requests and analyzing se

9 repos — triés par ⭐ Rechercher sur GitHub ↗

https://support.checkpoint.com/results/sk/sk182336

Signal Intelligence

Confidenceⓘ

95%

EPSS 94.39%

CVSS v3.1 8.6

Mentions 10

Last Seen Feb 25, 2025

CNA Information

CNA Assigner

checkpoint

CNA Title

Information disclosure

Analyst Note

CVE-2024-24919 meets all zero-day criteria: exploitation in the wild is explicitly documented (attacks since April 30, 2024), the CVE was published May 28, 2024, and authoritative sources (BleepingComputer, CERT-EU) explicitly label it as a zero-day with emergency patching. Exploitation clearly preceded or occurred contemporaneously with patch availability.