CVE-2026-18574
CriticalCVSS 9.3Summary
An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server (MDS) allows an unauthenticated remote attacker with network access to Management services to execute arbitrary commands on the Security Management Server. Successful exploitation could result in full compromise of the Security Management system.
Risk Assessment
An attacker can fully compromise the security management system, potentially leading to the breach of all managed security policies and access to sensitive data.
Recommendation
Immediately apply patches provided by the vendor for vulnerable versions of Check Point Security Management Server and MDS.
Original NVD description (English source)
An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server (MDS) could allow an unauthenticated remote attacker with network access to Management services to execute arbitrary commands on the Security Management Server. Successful exploitation could result in full compromise of the Security Management system. Check Point discovered this issue internally and has no indication of active exploitation.