Local Privilege Escalation vulnerability in Check Point Identity Agent Full for Windows OS
Priority LOW 35CWE-427Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-427.
Summary
A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS. An authenticated local user may be able to execute arbitrary code with SYSTEM privileges due to improper handling of executable resolution during the log collection process. Successful exploitation could allow an attacker to gain elevated privileges on the affected Windows endpoint.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00124 2nd percentileScored 2026-11-07
Fix Fixed Identity Agent (checkpoint): 81.087.0000
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Check Point | Identity Agent | before 81.087.0000 | 81.087.0000 | Patch available | CNA |
- Identity Agent VendorCheck Point Affected before 81.087.0000 Fixed in 81.087.0000 Patch available CNA
Remediation
- Fix · CNA Identity Agent (checkpoint) Fixed in 81.087.0000
Timeline
- 2026-10-02 Threatist record created from CVE-2026-10847
- 2026-10-03 Alias added: GHSA-phqv-gxhh-jc8p
References
More Check Point vulnerabilities
- TI-2026-63071 Directory Traversal and File upload allows execution of arbitrary script on the Management Server KEVCVSS 3.1CRITICAL 9.8
- TI-2026-58455 Improper Certificate Validation in Quantum Security Gateway KEVCVSS 3.1CRITICAL 9.8
- TI-2014-05975 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed… KEVCVSS 3.1CRITICAL 9.8
- TI-2014-05157 GNU Bash through 4.3 processes trailing strings after function definitions in the values… KEVCVSS 3.1CRITICAL 9.8
- TI-2026-37414 User Authentication Bypass in VPN Remote Access and Mobile Access KEVCVSS 3.1CRITICAL 9.3
- TI-2026-13573 Authentication Bypass in the SmartConsole Login Process Using an Application Token KEVCVSS 4.0CRITICAL 9.3
Sources
- CVE-2026-10847 · CVE Program
- CVE-2026-10847 · NVD
- FIRST EPSS
- GHSA-phqv-gxhh-jc8p · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences