CVE-2026-62144criticalCWE-287

CVE-2026-62144: fallo crítico en checkpoint Multi-Domain Security Management

Management Authentication Bypass and Privilege Escalation

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Quantum Security Management+ Monitorear Multi-Domain Security Management

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ella tiene alerta oficial del gobierno de Brasil.

ssvc Trackcvss 9.1epss 1.0%
Alerta oficial en Brasil

El gobierno federal de Brasil publicó una alerta, recomendación o boletín que cita esta vulnerabilidad.

Fuente: CTIR Gov (GSI) y CISC Gov.br, bajo licencia CC BY-ND 3.0.
An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security Gateways. Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Productos afectados
checkpoint · Multi-Domain Security Managementcheckpoint · Quantum Security Management
CVEs relacionadas — checkpoint Multi-Domain Security Management

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-93616CRITICALDirectory Traversal and File upload allows execution of arbitrary script on the Management ServerEPSS 91.6%KEVCVE-2026-16232CRITICALAuthentication Bypass in the SmartConsole Login Process Using an Application TokenEPSS 3.5%KEVCVE-2026-85103CRITICALHeap-based Buffer Overflow in VPN Certificate ASN.1 DecodingEPSS 4.3%CVE-2026-48136MEDIUMAuthenticated Administrator Role-Based Access Control Bypass in ComplianceEPSS 3.7%CVE-2026-91843CRITICALStack overflow in login process to the Security Management and Log ServersEPSS 0.5%CVE-2026-62145HIGHLocal Privilege Escalation in Gaia PortalEPSS 0.4%