Auth bypass in Checkpoint Multi-Domain Security Management
CVE-2026-62144
An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security Gateways. Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients.
Vulnerability class: Broken Authentication
EPSS: 0.208 (97.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N.
Affected products
- Checkpoint Multi-domain Security Management — versions R82.10 with Jumbo Hotfix Take 36 or below, R82 with Jumbo Hotfix Take 118 or below, R81.20 with Jumbo Hotfix Take 158 or below
- Checkpoint Quantum Security Management — versions R82.10 with Jumbo Hotfix Take 36 or below, R82 with Jumbo Hotfix Take 118 or below, R81.20 with Jumbo Hotfix Take 158 or below
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-62144?
- CVE-2026-62144 is a critical-severity vulnerability in Checkpoint Multi-Domain Security Management, classified under Improper Authentication. CVSS score: 9.1/10. Published 2026-07-22.
- How severe is CVE-2026-62144?
- Critical severity. CVSS v3 base score is 9.1 out of 10.