Critical severity9.1NVD Advisory· Published Jul 22, 2026· Updated Jul 24, 2026
CVE-2026-62144
CVE-2026-62144
Description
An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security Gateways. Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients.
Affected products
2Patches
Vulnerability mechanics
References
1News mentions
7- ⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and MoreThe Hacker News · Jul 27, 2026
- Weekly Cyber Security Newsletter Bulletin – Certighost Exploit, Checkpoint 0-day, HTTP/2 Flaw, Notepad++ Plugin Abuse +20 StoriesCyber Security News · Jul 26, 2026
- CVE-2026-16232: Critical Check Point SmartConsole Authentication Bypass Exploited in the WildRapid7 Blog · Jul 23, 2026
- Attackers exploit critical Check Point flaw to take over firewall management (CVE-2026-16232)Help Net Security · Jul 23, 2026
- New Check Point Zero-Day Vulnerability Exploited in the WildSecurityWeek · Jul 23, 2026
- Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin AccessThe Hacker News · Jul 23, 2026
- CISA Warns of Check Point Authentication Vulnerability Actively Exploited in the WildCyber Security News · Jul 23, 2026