An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security Gateways. Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Checkpoint |
|
No data.
No data.
References
| Link | Providers |
|---|---|
| https://support.checkpoint.com/results/sk/sk185152 |
|
History
Mon, 27 Jul 2026 20:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Checkpoint
Checkpoint multi-domain Management Checkpoint quantum Security Management |
|
| Vendors & Products |
Checkpoint
Checkpoint multi-domain Management Checkpoint quantum Security Management |
Wed, 22 Jul 2026 20:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
cvssV3_1
|
Wed, 22 Jul 2026 14:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security Gateways. Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients. | |
| Title | Management Authentication Bypass and Privilege Escalation | |
| Weaknesses | CWE-287 | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: checkpoint
Published: 2026-07-22T13:53:35.969Z
Updated: 2026-07-24T03:56:14.016Z
Reserved: 2026-07-13T10:24:07.648Z
Link: CVE-2026-62144
Vulnrichment
Updated: 2026-07-22T19:30:10.402Z
NVD
No data.
Redhat
No data.