CVE-2026-62144 Details

An authentication bypass vulnerability has been identified in Check Point Security Management and Multi-Domain Security Management. This vulnerability allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also enable command execution on managed Security Gateways. The vulnerability affects versions R77.30, R80, R80.10, R80.20, R80.30, R81, R81.10, R81.20, R82, and R82.10. Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients.

To address this vulnerability, it is recommended to follow the Check Point Hardening Best Practices Guide, limit Trusted Clients to trusted IP addresses or subnets, and protect Management access with a firewall. The vulnerability has been fixed in the Jumbo Hotfix Accumulator for R82.10 (starting from Take 36), R82 (starting from Take 118), and R81.20 (starting from Take 158).