Medium [CVE-2026-48136] When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain (CMA) can modify stored metadata associated with Compliance Best Practices in another Management Domain, where the administrator has no access permissions, bypassing Role-Based Access Control (RBAC)
This medium-severity Check Point advisory covers CVE-2026-48136 affecting Check Point, Multi-Domain Security Management Server.
Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.
VulniPulse record published Record updated
Android app · Google Play
Monitor future Check Point CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Summary
When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain (CMA) can modify stored metadata associated with Compliance Best Practices in another Management Domain, where the administrator has no access permissions, bypassing Role-Based Access Control (RBAC).The issue affects: R82.10 with Jumbo Hotfix Take 6 or below R82 with Jumbo Hotfix Take 91 or below R81.20 with Jumbo Hotfix Take 127 or below All releases from R81.10 and below This issue received the ID CVE-2026-48136.
Affected products named by the advisory: Multi-Domain Security Management Server.
Affected versions
No affected-version range was extracted from the source record. The vendor advisory is authoritative — check it before change work.
Official advisory · high-confidence parse· fetched 19 days ago·verify at source
- R82.10 Jumbo Hotfix Accumulator Take 19 or later
- R82 Jumbo Hotfix Accumulator Take 103 or later
- R81.20 Jumbo Hotfix Accumulator Take 141 or later
Official advisory · high-confidence parse· fetched 19 days ago·verify at source
Mitigation checklist
- MitigationTo mitigate the issue, enforce multi-factor authentication (MFA) for all administrator accounts to prevent attackers from using leaked or stolen passwords to authenticate and move laterally within the environment.SolutionThis problem was fixed. The fix is included in: Jumbo Hotfix Accumulator for R82.10 starting from Take 19 Jumbo Hotfix Accumulator for R82 starting from Take 103 Jumbo Hotfix Accumulator for R81.20 starting from Take 141
Official advisory · high-confidence parse· fetched 19 days ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.