CVE-2026-62144
An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server.
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 20.8%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security Gateways. Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients.
- CVSS 3.1
- 9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- EPSS
- 20.82% probability · 97th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-287
- Source
- cve@checkpoint.com
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.