CVE-2026-10847Disclosure

MEDIUMCVSS 7.8 · HIGH

Exploitation ongoing with high activity in latest observed window (2 mentions)

Immediate actions

  • Patch affected systems immediately
  • Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS. An authenticated local user may be able to execute arbitrary code with SYSTEM privileges due to improper handling of executable resolution during the log collection process. Successful exploitation could allow an attacker to gain elevated privileges on the affected Windows endpoint.

4.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-427

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Active exploitation appears in 1 classified signals
  • Patch or workaround signal is available
  • 5 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 4 signals
  • Disclosure: 4 classified signals
  • Peaked 1d ago at 3 mentions (2026-06-11); latest day: 2
  • 5 total mentions across 2 days

Deep dive

Activity timeline5 mentions / 2d
01223Mentions · 2026-06-11: 3Mentions · 2026-06-12: 2Active Exploitation · 2026-06-12: 1Patch / Workaround · 2026-06-12: 1Technical Details · 2026-06-11: 3Technical Details · 2026-06-12: 106-1106-12
Signal classification2 categories
Disclosure
480.0%
Active Exploitation
120.0%
Referenced assets6 URLs
Classification over time
DateTotalLabels
2026-06-113
Disclosure3
2026-06-122
Active Exploitation1Disclosure1
Full discourse5 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-10847 A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS. An authenticated local user may be able to execute arbitrary code… https://www.cve.org/CVERecord?id=CVE-2026-10847

    Post summary

    The post announces CVE-2026-10847, a local privilege escalation vulnerability in Check Point Identity Agent Full for Windows that could let an authenticated local user execute arbitrary code.

    01000154
    57.6K followersView on X
  • Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters
    Disclosure

    CVE-2026-10847 - Privilege Escalation in Check Point Identity Agent. Local authenticated user can execute code with SYSTEM privileges. CVSS 7.8. No patch available. Restrict access immediately. #CVE #CheckPoint #infosec #CVEAlert #VPN More detailed info: https://www.valtersit.com/cve/CVE-2026-10847/

    Post summary

    Check Point Identity Agent has a local privilege escalation bug (CVE-2026-10847) rated CVSS 7.8; no patch is yet available, so users should restrict access as a mitigation.

    0000096
    929 followersView on X
  • VulDB 🛡@vuldb
    Active Exploitation

    Our CTI team identified a lot of activities targeting Check Point Identity Agent (CVE-2026-10847) https://vuldb.com/vuln/370390/cti

    Post summary

    CTI team reports a high volume of activity targeting Check Point Identity Agent (CVE-2026-10847), indicating potential active exploitation, but no PoC, exploit code, patch, or technical details are provided.

    0000094
    2.2K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-10847 Local Privilege Escalation in Check Point Identity Agent ... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-10847 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2

    Post summary

    The tweet announces CVE-2026-10847, a local privilege escalation issue in Check Point Identity Agent, and links to a vulnerability details page, but provides no PoC, exploit code, active exploitation evidence, or patch information.

    0000074
    4.0K followersView on X
  • Kaitan ID Security@KaitanSecurity
    Disclosure

    ⚠️ HIGH — CVE-2026-10847 A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS. An authenticated l… CVSS 7.8 Full analysis → https://sec.kaitan.id/cves/CVE-2026-10847 #CheckPoint #CyberSecurity #InfoSec

    Post summary

    The post alerts readers to a new local privilege escalation vulnerability in Check Point Identity Agent Full for Windows, provides the CVE identifier, a CVSS score of 7.8, and links to a full analysis.

    0000079
    81 followersView on X

Explore more