← CVE Intelligence

CVE-2026-18574

Authentication Bypass in Check Point Security Management Server PUBLISHED

Description (CNA)

An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server (MDS) could allow an unauthenticated remote attacker with network access to Management services to execute arbitrary commands on the Security Management Server. Successful exploitation could result in full compromise of the Security Management system. Check Point discovered this issue internally and has no indication of active exploitation.

Affected (CNA)

Vendor / productVersions
checkpoint / Security Management Serveraffected R82.10 with Jumbo Hotfix Accumulator Take 39 or below; affected R82 with Jumbo Hotfix Accumulator Take 121 or below; affected R81.20 with Jumbo Hotfix Accumulator Take 160 or below; affected R81.10; affected R81; affected R80.40; affected R80.30; affected R80.20; affected R80.10; affected R80
checkpoint / Multi-Domain Security Management Serveraffected R82.10 with Jumbo Hotfix Accumulator Take 39 or below; affected R82 with Jumbo Hotfix Accumulator Take 121 or below; affected R81.20 with Jumbo Hotfix Accumulator Take 160 or below; affected R81.10; affected R81; affected R80.40; affected R80.30; affected R80.20; affected R80.10; affected R80

CWE

CWE-288

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.