CVE-2026-62144: falha crítica em checkpoint Multi-Domain Security Management
Management Authentication Bypass and Privilege Escalation
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Ela tem alerta oficial do governo brasileiro.
ssvc Trackcvss 9.1epss 1.0%
Alerta oficial no Brasil
O governo federal publicou alerta, recomendação ou boletim que cita esta vulnerabilidade.
- CISC Gov.br · 28 jul 2026Boletim do CISC de Vulnerabilidadeler no gov.br ↗
Fonte: CTIR Gov (GSI) e CISC Gov.br, sob licença CC BY-ND 3.0.
An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security Gateways. Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Produtos afetados
checkpoint · Multi-Domain Security Managementcheckpoint · Quantum Security ManagementCVEs relacionadas — checkpoint Multi-Domain Security Management
No mesmo produto, das mais perigosas para as menos.
CVE-2026-93616CRITICALDirectory Traversal and File upload allows execution of arbitrary script on the Management ServerEPSS 91.6%KEVCVE-2026-16232CRITICALAuthentication Bypass in the SmartConsole Login Process Using an Application TokenEPSS 3.5%KEVCVE-2026-85103CRITICALHeap-based Buffer Overflow in VPN Certificate ASN.1 DecodingEPSS 4.3%CVE-2026-48136MEDIUMAuthenticated Administrator Role-Based Access Control Bypass in ComplianceEPSS 3.7%CVE-2026-91843CRITICALStack overflow in login process to the Security Management and Log ServersEPSS 0.5%CVE-2026-62145HIGHLocal Privilege Escalation in Gaia PortalEPSS 0.4%