CRITICAL CWE-287
CVE-2026-62144
Management Authentication Bypass and Privilege Escalation
Check Point·Quantum Security Management
9.1/ 10
CVSS 3.1
Critical severity
1.0%
EPSS exploit odds
Chance of exploitation in the next 30 days
Higher than 64% of all CVEs
Not listed
CISA KEV catalog
No confirmed in-the-wild exploitation on CISA's list.
Timeline
- Published
- Jul 22, 2026
- Updated
- Jul 24, 2026
- First covered
- Jul 23, 2026
- Latest story
- 4 months ago
Summary
An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security Gateways. Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients.
CWE-287Improper Authentication.
Attack profile
Attack vectorNetwork
ComplexityLow
PrivilegesNone
User interactionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityNone
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NAffected products
- Check Point Quantum Security ManagementR82.10 with Jumbo Hotfix Take 36 or belowR82 with Jumbo Hotfix Take 118 or belowR81.20 with Jumbo Hotfix Take 158 or belowR81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30
- Check Point Multi-Domain Security ManagementR82.10 with Jumbo Hotfix Take 36 or belowR82 with Jumbo Hotfix Take 118 or belowR81.20 with Jumbo Hotfix Take 158 or belowR81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30