Vulnerability · Published Jul 22, 2026 · Assigned by checkpoint
CVE-2026-62144Management Authentication Bypass and Privilege Escalation
Critical 9.1
In plain English
A critical-severity improper authentication in Multi-Domain Security Management from checkpoint. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 63% of all known vulnerabilities).
Official description
An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security Gateways. Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| checkpoint | Quantum Security Management | R82.10 with Jumbo Hotfix Take 36 or belowR82 with Jumbo Hotfix Take 118 or belowR81.20 with Jumbo Hotfix Take 158 or belowR81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30 |
| checkpoint | Multi-Domain Security Management | R82.10 with Jumbo Hotfix Take 36 or belowR82 with Jumbo Hotfix Take 118 or belowR81.20 with Jumbo Hotfix Take 158 or belowR81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30 |
Weakness: CWE-287 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N