CVE-2026-62144

Management Authentication Bypass and Privilege Escalation

State: Published
Severity: 9.1 Critical
Published: Jul 22, 2026
Updated: Jul 24, 2026
Reserved: Jul 13, 2026

Description

An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security Gateways. Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients.

Scores

CVSS	Score	Vector	Source
3.1	9.1 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N	CISA-ADP

Weaknesses

CWE-287 Improper Authentication.

Affected Products

Product	Versions
Quantum Security Managementcheckpoint	R82.10 with Jumbo Hotfix Take 36 or belowAffected R82 with Jumbo Hotfix Take 118 or belowAffected R81.20 with Jumbo Hotfix Take 158 or belowAffected R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30Affected
Multi-Domain Security Managementcheckpoint	R82.10 with Jumbo Hotfix Take 36 or belowAffected R82 with Jumbo Hotfix Take 118 or belowAffected R81.20 with Jumbo Hotfix Take 158 or belowAffected R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30Affected

References

https://support.checkpoint.com/results/sk/sk185152

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.