CVE-2024-24919: Check Point Security Gateways Information Disclosure

CVE-2024-24919 describes an information disclosure vulnerability in Check Point Security Gateways exposed to the internet when Remote Access VPN or Mobile Access Software Blades service is active. A remote attacker could read certain information from the gateway. The vulnerability affects critical remote access components used in enterprise environments.

The CVSS score is 8.6 (high), assigned based on potential unauthorized access to gateway data. Check Point has released a security patch. A public signal on a GitHub repository from November 2026 indicates current technical interest in the vulnerability. There are no confirmed indicators of active exploitation in official NVD data.

IT teams and CISOs must urgently verify which Check Point Security Gateways have Remote Access VPN or Mobile Access Software Blades enabled with internet access. Apply the security patch provided by Check Point immediately. Review remote access logs for anomalies or unauthorized access attempts. Document patch dates in your vulnerability inventory.