Search/CVE-2026-62144
● CVE — Critical

CVE-2026-62144

DiscoveredJul 22, 2026UpdatedJul 24, 2026

An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security Gateways. Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients.

CVSS v3.1
9.1 CRITICAL
EPSS
1.01%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
1
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 26, 2026 → Sep 25, 2026
▼ 19.8pp
20.8% → 1.01% over 2 tracked changes
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityNONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Connections
5 relationships
Timeline
disclosure → media coverage
Jul 22, 2026
Disclosure — published as a CVE record.
Sep 17, 2026
thehackernews.com reports: Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root