Security Management and SmartConsole
CVE-2026-62144: Management Authentication Bypass and Privilege Escalation
An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Quantum Security Management R82.10 with Jumbo Hotfix Take 36 or below | See the advisory |
| Quantum Security Management R82 with Jumbo Hotfix Take 118 or below | See the advisory |
| Quantum Security Management R81.20 with Jumbo Hotfix Take 158 or below | See the advisory |
| Quantum Security Management R81.10, R81, R80 | See the advisory |
| Multi-Domain Security Management R82.10 with Jumbo Hotfix Take 36 or below | See the advisory |
| Multi-Domain Security Management R82 with Jumbo Hotfix Take 118 or below | See the advisory |
| Multi-Domain Security Management R81.20 with Jumbo Hotfix Take 158 or below | See the advisory |
| Multi-Domain Security Management R81.10, R81, R80 | See the advisory |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security Gateways. Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 10 Oct 2026.