CVE-2026-62144: An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative c

criticalCVSS 9.1CVE-2026-62144

An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security Gateways. Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients.

Details

Source: NVD Recent CVEs (US · database · site)
Severity: critical — CVSS 9.1
Published: 2026-07-22
Last updated: 2026-07-24
Exploitation: Not in CISA KEV at last sync

Original advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-62144

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Elevated exploitation riskCVE-2026-6214420.6% 30-day exploitation probability — well above the norm. Schedule remediation this cycle. Riskier than 97% of all scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-62144	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

high[NEW] [high] Check Point SmartConsole: Multiple vulnerabilitiescert-bund

Recent advisories for An authentication bypass

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

mediumCVE-2026-67337: better-auth versions before 1.4.9 contain a two-factor authentication bypass vulnerability whe…nvd · 2026-08-01
highCVE-2026-67328: @better-auth/sso versions before 1.6.21 contain multiple authentication bypass vulnerabilities…nvd · 2026-08-01
criticalCVE-2026-15964: The Single Sign On For TNG plugin for WordPress is vulnerable to Authentication Bypass via una…nvd · 2026-08-01
unknownCVE-2026-52134: An issue in the parseGoosePayload() function (/goose/goose_receiver.c) of libiec61850 v1.6 all…nvd · 2026-07-31
criticalCisco Secure Firewall Management Center Software Authentication Bypass Vulnerabilitycisco-psirt · 2026-07-31
unknownCVE-2026-14541: An authentication bypass and audience confusion vulnerability exists in the Google OAuth provi…nvd · 2026-07-31