Auth bypass in Checkpoint Multi-Domain Security Management
CVE-2026-62144
An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security Gateways. Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients.
Vulnerability class: Broken Authentication
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N.
EPSS exploit prediction
EPSS: 0.010 (62.6th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 63rd percentile — 62.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.208 · newest: 0.010 · change: -0.198
Affected products
- Checkpoint Multi-Domain Security Management — versions R82.10 with Jumbo Hotfix Take 36 or below, R82 with Jumbo Hotfix Take 118 or below, R81.20 with Jumbo Hotfix Take 158 or below
- Checkpoint Quantum Security Management — versions R82.10 with Jumbo Hotfix Take 36 or below, R82 with Jumbo Hotfix Take 118 or below, R81.20 with Jumbo Hotfix Take 158 or below
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-62144?
- CVE-2026-62144 is a critical-severity vulnerability in Checkpoint Multi-Domain Security Management, classified under Improper Authentication. CVSS score: 9.1/10. Published 2026-07-22.
- How severe is CVE-2026-62144?
- Critical severity. CVSS v3 base score is 9.1 out of 10.