← Back to browse · API

CVE-2026-62144

Severity
CRITICAL
CVSS
9.1
EPSS
0.20623
Risk score
43.62
CISA KEV
No
PoC
No
Published
2026-07-22
Modified
2026-07-24
First seen
2026-08-05
Aliases
EUVD-2026-47701, GHSA-QG2M-C9GF-4QVP
Products
checkpoint:Multi-Domain Security Management R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30, checkpoint:Multi-Domain Security Management R81.20 with Jumbo Hotfix Take 158 or below, checkpoint:Multi-Domain Security Management R82 with Jumbo Hotfix Take 118 or below, checkpoint:Multi-Domain Security Management R82.10 with Jumbo Hotfix Take 36 or below, checkpoint:Quantum Security Management R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30, checkpoint:Quantum Security Management R81.20 with Jumbo Hotfix Take 158 or below, checkpoint:Quantum Security Management R82 with Jumbo Hotfix Take 118 or below, checkpoint:Quantum Security Management R82.10 with Jumbo Hotfix Take 36 or below
Sources
nvd CVE-2026-62144
euvd EUVD-2026-47701

Description

An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security Gateways. Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients.

References