Authentication bypass in Check Point Security Management Server (CVE-2026-18574)

An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server (MDS) allows an unauthenticated remote attacker with network access to Management services to execute arbitrary commands on the affected server. Successful exploitation could result in full compromise of the Security Management system. This issue was discovered internally; Check Point has no indication of active exploitation. Affected versions: - R80 (EOS) - R80.10 (EOS) - R80.20 - R80.30 (EOS) - R80.40 (EOS) - R81 (EOS) - R81.10 (EOS) - R81.20 - R82 - R82.10 We recommend updating to: Jumbo Hotfix Accumulator for R82.10 Take 40, Jumbo Hotfix Accumulator for R82 Take 122, Jumbo Hotfix Accumulator for R81.20 Take 161. CVSS 9.3 · our assessment: act_now Reference: https://support.checkpoint.com/results/sk/sk185222 Details: https://vuln.today/cve/CVE-2026-18574