CVE-2026-62144
Management Authentication Bypass and Privilege Escalation
Severity
Critical 9.1
CVSS 3.1
Exploited
Not listed
EPSS
0.208
97.4th percentile
Discovered by
Not disclosed
Published
Jul 22, 2026
Assigned by checkpoint
Description
An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security Gateways. Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients.
Weakness: CWE-287
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Check Point | Multi-Domain Security Management | Network & Security Management | cna-assigner |
| Check Point | Quantum Security Management | Network & Security Management | cna-assigner |
Vendor-reported products (2)
- checkpoint · Quantum Security Management
- checkpoint · Multi-Domain Security Management