{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/gaia-portal/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:check_point:gaia_portal:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.3,"id":"CVE-2026-107484"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Gaia Portal"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Check Point"],"content_html":"\u003cp\u003eCVE-2026-107484 is an input and authorization validation vulnerability in Check Point Gaia Portal backend handlers. The vulnerability enables an authenticated user with standard privileges to perform restricted administrative operations. The vulnerability carries a CVSS v3.1 base score of 7.3.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows authenticated users to bypass authorization controls, potentially leading to unauthorized administrative control over the Gaia Portal environment.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eIdentify all instances of Check Point Gaia Portal currently in production.\u003c/li\u003e\n\u003cli\u003eMonitor administrative access logs for unauthorized privileged operations originating from standard user accounts.\u003c/li\u003e\n\u003cli\u003eApply security patches from Check Point as they become available for the Gaia Portal to remediate the backend validation flaw.\u003c/li\u003e\n\u003c/ol\u003e\n","date_modified":"2026-11-12T16:51:09Z","date_published":"2026-11-12T16:51:09Z","id":"https://feed.craftedsignal.io/briefs/2026-11-gaia-portal-privilege-escalation-cve-2026-107484/","summary":"An input and authorization validation vulnerability in Gaia Portal allows an authenticated, non-administrative user to perform privileged operations by exploiting improper backend handler controls.","title":"Check Point Gaia Portal: Authorization Validation Vulnerability (CVE-2026-107484)","url":"https://feed.craftedsignal.io/briefs/2026-11-gaia-portal-privilege-escalation-cve-2026-107484/"}],"language":"en","title":"CraftedSignal Threat Feed - Gaia Portal","version":"https://jsonfeed.org/version/1.1"}