Authentication bypass and privilege escalation in Check Point Security Management (CVE-2026-62144)

An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management Server allows an unauthenticated remote attacker to execute arbitrary administrative commands on the Management Server, including run-script and exec-command operations. Successful exploitation may also enable command execution on managed Security Gateways. Exploitation requires network access to the Management Server without firewall protection or without restrictions on Trusted Clients. Affected versions: - R77.30 - R80 - R80.10 - R80.20 - R80.30 - R80.40 - R81 - R81.10 - R81.20 - R82 - R82.10 We recommend updating to: Jumbo Hotfix Accumulator for R82.10 starting from Take 36, Jumbo Hotfix Accumulator for R82 starting from Take 118, Jumbo Hotfix Accumulator for R81.20 starting from Take 158. CVSS 9.1 · our assessment: act_now Reference: https://support.checkpoint.com/results/sk/sk185152 Details: https://vuln.today/cve/CVE-2026-62144