Check Point Security Management Unauthenticated RCE (CVE-2026-18574)

Vulnerability Overview Vulnerability ID: CVE-2026-18574 Description: An unauthenticated attacker may be able to bypass administrative authentication and execute arbitrary commands on the Security Management System. Successful exploitation could lead to full control of the Security Management System. This issue was discovered internally, and Check Point is not currently aware of any active exploitation in the wild. Impact Scope Affected Products: - Multi-Domain Security Management Server - Multi-Domain Security Management Server (MDS) Affected Versions: - R80 (EOS), R80.10 (EOS), R80.30 (EOS), R80.40 (EOS), R81 (EOS), R81.10 (EOS) - R81.20, R82, R82.10 Mitigation Measures 1. Follow Check Point Hardening Best Practices 2. Restrict Trusted Clients - In SmartConsole, navigate to Management & Settings > Permissions & Administrators > Trusted Clients. - Double-click the client to be edited. - In the Trusted Clients configuration window, restrict access only to authorized hosts and subnets. - Ensure that "Any" is not used as the definition for Trusted Clients. - Click "OK" and install the security policy. 3. Secure Management Access - Use firewall policies to restrict management access. - Allow management connections only from trusted management workstations. - Ensure implicit rules that protect control connections are enabled. - Verify that management services are not exposed to untrusted networks. Solution Fixed Versions: - R82.10 Jumbo Hotfix Accumulator from Take 40 onwards - R82 Jumbo Hotfix Accumulator from Take 122 onwards - R81.20 Jumbo Hotfix Accumulator from Take 161 onwards Additional Information Alert Severity: High Last Modified Date: 2026-08-03 Article Properties: - Access Level: General - Severity: High - Status: Approved - Creation Date: 2026-08-01 - Last Modified Date: 2026-08-03 Footer Notice If the required information is not found, you may open a service request.

Goal Reached Thanks to every supporter — we hit 100%!

Check Point Security Management Unauthenticated RCE (CVE-2026-18574)