CVE-2026-10847

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-10847", "assignerOrgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45", "state": "PUBLISHED", "assignerShortName": "checkpoint", "dateReserved": "2026-06-04T12:13:32.828Z", "datePublished": "2026-06-11T13:52:11.651Z", "dateUpdated": "2026-06-11T14:20:43.159Z"}, "containers": {"cna": {"affected": [{"product": "Identity Agent", "vendor": "checkpoint", "versions": [{"status": "affected", "version": "Versions prior to 81.087.0000"}]}], "title": "Local Privilege Escalation vulnerability in Check Point Identity Agent Full for Windows OS", "descriptions": [{"lang": "en", "value": "A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS. An authenticated local user may be able to execute arbitrary code with SYSTEM privileges due to improper handling of executable resolution during the log collection process. Successful exploitation could allow an attacker to gain elevated privileges on the affected Windows endpoint."}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH"}}], "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-427", "description": "Uncontrolled Search Path Element", "type": "CWE"}]}], "references": [{"url": "https://support.checkpoint.com/results/sk/sk185052", "name": "Check Point Security Advisory for CVE-2026-10847", "tags": ["vendor-advisory"]}], "providerMetadata": {"orgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45", "shortName": "checkpoint", "dateUpdated": "2026-06-11T13:52:11.651Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-11T14:19:16.357809Z", "id": "CVE-2026-10847", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-11T14:20:43.159Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-10847", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-06-11T14:19:16.357809Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-11T14:20:39.322Z"}}], "cna": {"title": "Local Privilege Escalation vulnerability in Check Point Identity Agent Full for Windows OS", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "checkpoint", "product": "Identity Agent", "versions": [{"status": "affected", "version": "Versions prior to 81.087.0000"}]}], "references": [{"url": "https://support.checkpoint.com/results/sk/sk185052", "name": "Check Point Security Advisory for CVE-2026-10847", "tags": ["vendor-advisory"]}], "descriptions": [{"lang": "en", "value": "A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS. An authenticated local user may be able to execute arbitrary code with SYSTEM privileges due to improper handling of executable resolution during the log collection process. Successful exploitation could allow an attacker to gain elevated privileges on the affected Windows endpoint."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-427", "description": "Uncontrolled Search Path Element"}]}], "providerMetadata": {"orgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45", "shortName": "checkpoint", "dateUpdated": "2026-06-11T13:52:11.651Z"}}}, "cveMetadata": {"cveId": "CVE-2026-10847", "state": "PUBLISHED", "dateUpdated": "2026-06-11T14:20:43.159Z", "dateReserved": "2026-06-04T12:13:32.828Z", "assignerOrgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45", "datePublished": "2026-06-11T13:52:11.651Z", "assignerShortName": "checkpoint"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "Identity Agent", "vendor": "checkpoint", "versions": [{"status": "affected", "version": "Versions prior to 81.087.0000"}]}], "source": "cve@checkpoint.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS. An authenticated local user may be able to execute arbitrary code with SYSTEM privileges due to improper handling of executable resolution during the log collection process. Successful exploitation could allow an attacker to gain elevated privileges on the affected Windows endpoint."}, {"lang": "es", "value": "Una vulnerabilidad de escalada de privilegios local existe en Check Point Identity Agent Full para sistemas operativos Windows. Un usuario local autenticado podr\u00eda ejecutar c\u00f3digo arbitrario con privilegios de SYSTEM debido a un manejo inadecuado de la resoluci\u00f3n de ejecutables durante el proceso de recolecci\u00f3n de registros. La explotaci\u00f3n exitosa podr\u00eda permitir a un atacante obtener privilegios elevados en el endpoint Windows afectado."}], "id": "CVE-2026-10847", "lastModified": "2026-10-26T11:10:00.157", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "cve@checkpoint.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-10847", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-06-11T14:19:16.357809Z", "version": "2.0.3"}}]}, "published": "2026-06-11T14:16:26.060", "references": [{"source": "cve@checkpoint.com", "url": "https://support.checkpoint.com/results/sk/sk185052"}], "sourceIdentifier": "cve@checkpoint.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-427"}], "source": "cve@checkpoint.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,81.087.0000)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Identity Agent", "source": "cna", "vendor": "checkpoint"}, "product": "identity_agent", "vendor": "checkpoint"}], "created": "2026-06-11T20:45:10.790994+00:00", "updated": "2026-06-11T21:15:06.670028+00:00", "vendors": ["checkpoint", "checkpoint$PRODUCT$identity_agent"]}