What’s Vulnerable › Vulnerabilities
CVE-2026-62144: Management Authentication Bypass and Privilege Escalation
- Severity: critical (CVSS 9.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.0% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-07-22 · updated 2026-07-24
- Weakness: CWE-287
Description
An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security Gateways. Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients.
Affected products
- checkpoint Multi-Domain Security Management: through R82.10 with Jumbo Hotfix Take 36; through R82 with Jumbo Hotfix Take 118; through R81.20 with Jumbo Hotfix Take 158; R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30
- checkpoint Quantum Security Management: through R82.10 with Jumbo Hotfix Take 36; through R82 with Jumbo Hotfix Take 118; through R81.20 with Jumbo Hotfix Take 158; R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30
References
Get alerted when CVE-2026-62144 or the next vulnerability affects your stack