PT-2025-26216 · Check Point Software Technologies+1 · Check Point Smartconsole+1

Published 2025-04-09 · Updated 2025-07-28 · CVE-2024-24916

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions The product name cannot be determined.

Description Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileges (admin).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

BDU:2026-00078

CVE-2024-24916

Affected Products

Check Point Smartconsole

Smartconsole

References · 8

• https://support.checkpoint.com/results/sk/sk183342 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-24916 · Security Note
• https://osv.dev/vulnerability/CVE-2024-24916 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-00078 · Security Note
• https://twitter.com/afinePL/status/1949759321190846609 · Twitter Post
• https://twitter.com/CVEnew/status/1935723248421097942 · Twitter Post
• https://t.me/cvetracker/26569 · Telegram Post
• https://twitter.com/karmaz95/status/1947582604464533843 · Twitter Post