Check Point Quantum Security Management up to R81.10 Management Server improper authentication

Summaryinfo

A vulnerability was found in Check Point Quantum Security Management and Multi-Domain Security Management up to R81.10. It has been rated as very critical. This impacts an unknown function of the component Management Server. Performing a manipulation results in improper authentication. This vulnerability is reported as CVE-2026-62144. The attack is possible to be carried out remotely. No exploit exists.

Detailsinfo

A vulnerability classified as very critical has been found in Check Point Quantum Security Management and Multi-Domain Security Management up to R81.10. This affects an unknown function of the component Management Server. The manipulation with an unknown input leads to a improper authentication vulnerability. CWE is classifying the issue as CWE-287. When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security Gateways. Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients.

It is possible to read the advisory at support.checkpoint.com. This vulnerability is uniquely identified as CVE-2026-62144 since 07/13/2026. The exploitability is told to be easy. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. The technical details are unknown and an exploit is not publicly available. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 07/22/2026).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2026-47701). Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• Check Point

Name

• Multi-Domain Security Management
• Quantum Security Management

Version

• R77.30
• R80
• R80.10
• R80.20
• R80.30
• R81
• R81.10

License

• commercial

Website

• Vendor: https://www.checkpoint.com/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion