Critical [CVE-2026-62144] authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server
This critical-severity Check Point advisory covers CVE-2026-62144 affecting Quantum Security Management, Multi-Domain Security Management.
Android app · Google Play
Monitor future Check Point CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Summary
An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security Gateways.
Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients.
Affected products named by the advisory: Quantum Security Management.
- Quantum Security Management R82.10 with Jumbo Hotfix Take 36 or below
- Quantum Security Management R82 with Jumbo Hotfix Take 118 or below
- Quantum Security Management R81.20 with Jumbo Hotfix Take 158 or below
- Quantum Security Management R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30
- Multi-Domain Security Management R82.10 with Jumbo Hotfix Take 36 or below
- Multi-Domain Security Management R82 with Jumbo Hotfix Take 118 or below
- Multi-Domain Security Management R81.20 with Jumbo Hotfix Take 158 or below
- Multi-Domain Security Management R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30
Official advisory · high-confidence parse· fetched 3 days ago·verify at source
- R82.10 Jumbo Hotfix Accumulator Take 36 or later
- R82 Jumbo Hotfix Accumulator Take 118 or later
- R81.20 Jumbo Hotfix Accumulator Take 158 or later
Official advisory · high-confidence parse· fetched 3 days ago·verify at source
Mitigation checklist
- This problem was fixed. The fix is included in: Jumbo Hotfix Accumulator for R82.10 starting from Take 36 Jumbo Hotfix Accumulator for R82 starting from Take 118 Jumbo Hotfix Accumulator for R81.20 starting from Take 158
- Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients.
Official advisory · high-confidence parse· fetched 3 days ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.