CVE-2026-62144: Management Authentication Bypass and Privilege Escalation
An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security Gateways. Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Ensure network access to the Check Point Management Server is restricted so it is not reachable without firewall protection; specifically, block untrusted sources and require a configuration that restricts access to Trusted Clients only.
- Compensating control
If exploitation reaches managed Security Gateways, apply the same network isolation/restriction controls to managed Security Gateways to limit untrusted access paths so administrative commands cannot be executed remotely.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-62144?
The severity of CVE-2026-62144 is rated at 84, indicating a high-risk vulnerability.
How do I fix CVE-2026-62144?
To fix CVE-2026-62144, apply the security patches provided by Check Point for the affected versions of Security Management and Multi-Domain Security Management.
What impact does CVE-2026-62144 have on my system?
CVE-2026-62144 allows unauthenticated remote attackers to execute administrative commands, potentially compromising the Management Server and managed Security Gateways.
Is my system at risk if I use Check Point Security Management?
Yes, if you are using Check Point Security Management or Multi-Domain Security Management without the latest security updates, your system may be vulnerable to CVE-2026-62144.
Are there any known exploits for CVE-2026-62144?
While specific exploits for CVE-2026-62144 have not been publicly disclosed, the nature of the vulnerability suggests a significant risk for potential exploitation.