Check Point Firewall Management Auth Bypass & Privilege Escalation (CVE-2026-62144)

Vulnerability Overview Vulnerability Name: CVE-2026-62144 Description: Authentication Bypass and Privilege Escalation Severity: High Impact: Unauthenticated attackers can execute any command, including and , on the administration interface of Security Gateways (Check Point Firewall). Affected Products Affected Products: - Product: Security Management, Multi-Domain Security Management Server (MDS) - Versions: R77.30, R80, R80.10, R80.20, R80.30, R81, R81.10, R81.20, R82, R82.10 Conditions: Successful exploitation requires management access, with no restrictions imposed on Firewall Protection or Trusted Clients (GUI Clients). Mitigation Steps 1. Follow Check Point Hardening Best Practices Guide. 2. Restrict Trusted Clients (GUI Clients) to trusted IP addresses/subnets. - In SmartConsole, navigate to Manage & Settings - Permissions & Administrators - Trusted Clients. - Double-click the client you wish to edit. - In the opened Trusted Client configuration window, modify settings as required. - Ensure that "Any" is not selected as the type. - Click OK. 3. Use Firewall Protection to secure management access, restrict access to trusted IP addresses, and verify that implicit rules for control connections are enabled. This will create an implicit rule blocking management access from unauthorized IP addresses. Solution Fixed Versions: - Jumbo Hotfix Accumulator for R82.10 starting from Take 36 - Jumbo Hotfix Accumulator for R82 starting from Take 118 - Jumbo Hotfix Accumulator for R81.20 starting from Take 158 Article Attributes Access Level: General Severity: High Status: Approved Created Date: 2026-07-14 Last Modified Date: 2026-07-22 Page Helpfulness Was this helpful?: Yes / No Customer Service Customer Service Team: Ready to help, available 24 hours. Open a Service Request: Open a Service Request Footer Copyright: ©1994-2026 Check Point Software Technologies Ltd. All rights reserved. Privacy Policy: Privacy Policy User Agreement: User Agreement Social Media Follow Us: Instagram, Facebook, X, LinkedIn, YouTube Additional Information Technical Level: Basic Solution ID: sk185192 Navigation Support Center: Support Center Search: Search Results Secure Knowledge Details: Secureknowledge Details Favorites My Favorites: My Favorites Search Support Articles Search Support Articles: Search support articles, tools Language Selection Select Language: - English (English) - Spanish (Español) - French (Français) - German (Deutsch) - Italian (Italiano) - Portuguese (Português) - Japanese (日本語) - Chinese (中文) - Korean (한국어) - Taiwan (繁體中文) Navigation Toggle Toggle Navigation: Toggle Navigation Other Links Get a Demo: Get a Demo Contact Sales: Contact Sales Support: Support Log In: Log In Search Search: Search site

Goal Reached Thanks to every supporter — we hit 100%!

Check Point Firewall Management Auth Bypass & Privilege Escalation (CVE-2026-62144)