CVE-2026-62144: checkpoint multi-domain_security_management Improper Authentication
Vulnerability summary
CVE-2026-62144 is a critical (CVSS 9.1) Improper Authentication vulnerability in checkpoint multi-domain_security_management. EPSS estimates a 1.01% chance of exploitation in the next 30 days, higher than 62.4% of scored vulnerabilities.
Timeline
- 22-07-2026PublishedVulnerability first disclosed.
- 24-07-2026Last modifiedVulnerability information updated.
Description
An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security Gateways. Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST9.1CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS trend
Probability
1.01%
Chance of exploitation in the next 30 days
Percentile
62%
Versus all other CVEs
30-day change
-19.81 pp
From 20.82% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Checkpoint2 products
- multi-domain_security_managementR82.10 with Jumbo Hotfix Take 36 or below | R82 with Jumbo Hotfix Take 118 or below | R81.20 with Jumbo Hotfix Take 158 or below | R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30
- quantum_security_managementR82.10 with Jumbo Hotfix Take 36 or below | R82 with Jumbo Hotfix Take 118 or below | R81.20 with Jumbo Hotfix Take 158 or below | R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30
1 vendor · 2 products