CVE-2026-48136: Authenticated Administrator Role-Based Access Control Bypass in Compliance
When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain (CMA) can modify stored metadata associated with Compliance Best Practices in another Management Domain, where the administrator has no access permissions, bypassing Role-Based Access Control (RBAC).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-48136?
The severity of CVE-2026-48136 is classified as medium with a score of 4.1.
How do I fix CVE-2026-48136?
To fix CVE-2026-48136, ensure that proper role-based access controls are enforced and review administrator permissions across Management Domains.
What type of vulnerability is CVE-2026-48136?
CVE-2026-48136 is categorized as an access control vulnerability that allows bypassing role-based permissions.
Who is affected by CVE-2026-48136?
Authenticated administrators with read-write access in one Management Domain are affected by CVE-2026-48136 if they can manipulate metadata in another Management Domain.
What is the impact of CVE-2026-48136?
The impact of CVE-2026-48136 includes unauthorized modifications of compliance-related metadata, which can compromise data integrity.