CVE-2026-62144
CriticalCVSS 9.1Exploitation Probability (EPSS)
Very high risk97th percentile - higher than 97% of all known CVEs
Summary
Check Point Security Management and Multi-Domain Security Management contain an authentication bypass vulnerability. An unauthenticated remote attacker can execute administrative commands on the Management Server and on managed Security Gateways. Network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients is required.
Risk Assessment
An attacker can take over the entire Check Point security environment, including gateways, leading to complete network compromise.
Recommendation
Restrict network access to the Management Server using a firewall and configure a Trusted Clients list. Check for patches from Check Point.
Original NVD description (English source)
An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security Gateways. Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients.