Vulnerability-Lookup

WID-SEC-W-2026-2495

Vulnerability from csaf_certbund - Published: 2026-07-23 22:00 - Updated: 2026-07-29 22:00

Summary

Check Point SmartConsole: Mehrere Schwachstellen

Severity

Hoch

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Check Point SmartConsole ist eine Management-Anwendung zur zentralen Verwaltung von Check Point Sicherheitsgateways und -produkten.

Angriff: Ein Angreifer kann mehrere Schwachstellen in Check Point SmartConsole ausnutzen, um erweiterte Berechtigungen, einschließlich Administratorzugriff, zu erlangen oder beliebigen Code auszuführen – sogar mit Root-Rechten.

Betroffene Betriebssysteme: - Sonstiges - Windows

CVE-2026-16232

Affected products

Known affected 6 products

Product	Identifier	Version	Remediation
Check Point SmartConsole Multi-Domain Security Management R82 <Jumbo Hotfix Take 118 Check Point / SmartConsole		Multi-Domain Security Management R82 <Jumbo Hotfix Take 118
Check Point SmartConsole Multi-Domain Security Management R81.20 <Jumbo Hotfix Take 158 Check Point / SmartConsole		Multi-Domain Security Management R81.20 <Jumbo Hotfix Take 158
Check Point SmartConsole Security Management R82.10 <Jumbo Hotfix Take 36 Check Point / SmartConsole		Security Management R82.10 <Jumbo Hotfix Take 36
Check Point SmartConsole Security Management R82 <Jumbo Hotfix Take 118 Check Point / SmartConsole		Security Management R82 <Jumbo Hotfix Take 118
Check Point SmartConsole Security Management R81.20 <Jumbo Hotfix Take 158 Check Point / SmartConsole		Security Management R81.20 <Jumbo Hotfix Take 158
Check Point SmartConsole Multi-Domain Security Management R82.10 <Jumbo Hotfix Take 36 Check Point / SmartConsole		Multi-Domain Security Management R82.10 <Jumbo Hotfix Take 36

CVE-2026-62145

Affected products

Known affected 6 products

Product	Identifier	Version	Remediation
Check Point SmartConsole Security Management R82.10 <Jumbo Hotfix Take 36 Check Point / SmartConsole		Security Management R82.10 <Jumbo Hotfix Take 36
Check Point SmartConsole Security Management R82 <Jumbo Hotfix Take 118 Check Point / SmartConsole		Security Management R82 <Jumbo Hotfix Take 118
Check Point SmartConsole Security Management R81.20 <Jumbo Hotfix Take 158 Check Point / SmartConsole		Security Management R81.20 <Jumbo Hotfix Take 158
Check Point SmartConsole Security Gateway R82.10 <Jumbo Hotfix Take 36 Check Point / SmartConsole		Security Gateway R82.10 <Jumbo Hotfix Take 36
Check Point SmartConsole Security Gateway R82 <Jumbo Hotfix Take 118 Check Point / SmartConsole		Security Gateway R82 <Jumbo Hotfix Take 118
Check Point SmartConsole Security Gateway R81.20 <Jumbo Hotfix Take 158 Check Point / SmartConsole		Security Gateway R81.20 <Jumbo Hotfix Take 158

CVE-2026-62144

Affected products

Known affected 6 products, the same list as for CVE-2026-16232

References

6 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://support.checkpoint.com/results/sk/sk185169/	external
https://blog.checkpoint.com/security/security-adv…	external
https://www.cisa.gov/news-events/alerts/2026/07/2…	external
https://www.rapid7.com/blog/post/ra-check-point-s…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Check Point SmartConsole ist eine Management-Anwendung zur zentralen Verwaltung von Check Point Sicherheitsgateways und -produkten.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in Check Point SmartConsole ausnutzen, um erweiterte Berechtigungen, einschlie\u00dflich Administratorzugriff, zu erlangen oder beliebigen Code auszuf\u00fchren \u2013 sogar mit Root-Rechten.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Sonstiges\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-2495 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2495.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-2495 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2495"
      },
      {
        "category": "external",
        "summary": "Check Point Security Advisory vom 2026-07-23",
        "url": "https://support.checkpoint.com/results/sk/sk185169/"
      },
      {
        "category": "external",
        "summary": "Check Point July 2026 Security Update vom 2026-07-23",
        "url": "https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-check-point-smartconsole-authentication-bypass-cve-2026-16232"
      },
      {
        "category": "external",
        "summary": "CISA Known Exploited Vulnerabilities Catalog vom 2026-07-23",
        "url": "https://www.cisa.gov/news-events/alerts/2026/07/22/cisa-adds-two-known-exploited-vulnerabilities-catalog"
      },
      {
        "category": "external",
        "summary": "PoC",
        "url": "https://www.rapid7.com/blog/post/ra-check-point-smartconsole-authentication-bypass-technical-analysis-cve-2026-16232/"
      }
    ],
    "source_lang": "en-US",
    "title": "Check Point SmartConsole: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-07-29T22:00:00.000+00:00",
      "generator": {
        "date": "2026-07-30T11:02:56.901+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.6.0"
        }
      },
      "id": "WID-SEC-W-2026-2495",
      "initial_release_date": "2026-07-23T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-07-23T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2026-07-29T22:00:00.000+00:00",
          "number": "2",
          "summary": "PoC link aufgenommen"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "Multi-Domain Security Management R82.10 \u003cJumbo Hotfix Take 36",
                "product": {
                  "name": "Check Point SmartConsole Multi-Domain Security Management R82.10 \u003cJumbo Hotfix Take 36",
                  "product_id": "T057148"
                }
              },
              {
                "category": "product_version",
                "name": "Multi-Domain Security Management R82.10 Jumbo Hotfix Take 36",
                "product": {
                  "name": "Check Point SmartConsole Multi-Domain Security Management R82.10 Jumbo Hotfix Take 36",
                  "product_id": "T057148-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:checkpoint:smartconsole:multi-domain_security_management_r82.10__jumbo_hotfix_take_36"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Multi-Domain Security Management R82 \u003cJumbo Hotfix Take 118",
                "product": {
                  "name": "Check Point SmartConsole Multi-Domain Security Management R82 \u003cJumbo Hotfix Take 118",
                  "product_id": "T057149"
                }
              },
              {
                "category": "product_version",
                "name": "Multi-Domain Security Management R82 Jumbo Hotfix Take 118",
                "product": {
                  "name": "Check Point SmartConsole Multi-Domain Security Management R82 Jumbo Hotfix Take 118",
                  "product_id": "T057149-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:checkpoint:smartconsole:multi-domain_security_management_r82__jumbo_hotfix_take_118"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Multi-Domain Security Management R81.20  \u003cJumbo Hotfix Take 158",
                "product": {
                  "name": "Check Point SmartConsole Multi-Domain Security Management R81.20  \u003cJumbo Hotfix Take 158",
                  "product_id": "T057150"
                }
              },
              {
                "category": "product_version",
                "name": "Multi-Domain Security Management R81.20  Jumbo Hotfix Take 158",
                "product": {
                  "name": "Check Point SmartConsole Multi-Domain Security Management R81.20  Jumbo Hotfix Take 158",
                  "product_id": "T057150-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:checkpoint:smartconsole:multi-domain_security_management_r81.20___jumbo_hotfix_take_158"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Security Management R82.10 \u003cJumbo Hotfix Take 36",
                "product": {
                  "name": "Check Point SmartConsole Security Management R82.10 \u003cJumbo Hotfix Take 36",
                  "product_id": "T057151"
                }
              },
              {
                "category": "product_version",
                "name": "Security Management R82.10 Jumbo Hotfix Take 36",
                "product": {
                  "name": "Check Point SmartConsole Security Management R82.10 Jumbo Hotfix Take 36",
                  "product_id": "T057151-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:checkpoint:smartconsole:security_management_r82.10__jumbo_hotfix_take_36"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Security Management R82 \u003cJumbo Hotfix Take 118",
                "product": {
                  "name": "Check Point SmartConsole Security Management R82 \u003cJumbo Hotfix Take 118",
                  "product_id": "T057152"
                }
              },
              {
                "category": "product_version",
                "name": "Security Management R82 Jumbo Hotfix Take 118",
                "product": {
                  "name": "Check Point SmartConsole Security Management R82 Jumbo Hotfix Take 118",
                  "product_id": "T057152-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:checkpoint:smartconsole:security_management_r82__jumbo_hotfix_take_118"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Security Management R81.20  \u003cJumbo Hotfix Take 158",
                "product": {
                  "name": "Check Point SmartConsole Security Management R81.20  \u003cJumbo Hotfix Take 158",
                  "product_id": "T057154"
                }
              },
              {
                "category": "product_version",
                "name": "Security Management R81.20  Jumbo Hotfix Take 158",
                "product": {
                  "name": "Check Point SmartConsole Security Management R81.20  Jumbo Hotfix Take 158",
                  "product_id": "T057154-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:checkpoint:smartconsole:security_management_r81.20___jumbo_hotfix_take_158"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Security Gateway R82.10 \u003cJumbo Hotfix Take 36",
                "product": {
                  "name": "Check Point SmartConsole Security Gateway R82.10 \u003cJumbo Hotfix Take 36",
                  "product_id": "T057156"
                }
              },
              {
                "category": "product_version",
                "name": "Security Gateway R82.10 Jumbo Hotfix Take 36",
                "product": {
                  "name": "Check Point SmartConsole Security Gateway R82.10 Jumbo Hotfix Take 36",
                  "product_id": "T057156-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:checkpoint:smartconsole:security_gateway_r82.10__jumbo_hotfix_take_36"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Security Gateway R82 \u003cJumbo Hotfix Take 118",
                "product": {
                  "name": "Check Point SmartConsole Security Gateway R82 \u003cJumbo Hotfix Take 118",
                  "product_id": "T057157"
                }
              },
              {
                "category": "product_version",
                "name": "Security Gateway R82 Jumbo Hotfix Take 118",
                "product": {
                  "name": "Check Point SmartConsole Security Gateway R82 Jumbo Hotfix Take 118",
                  "product_id": "T057157-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:checkpoint:smartconsole:security_gateway_r82__jumbo_hotfix_take_118"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Security Gateway R81.20  \u003cJumbo Hotfix Take 158",
                "product": {
                  "name": "Check Point SmartConsole Security Gateway R81.20  \u003cJumbo Hotfix Take 158",
                  "product_id": "T057158"
                }
              },
              {
                "category": "product_version",
                "name": "Security Gateway R81.20  Jumbo Hotfix Take 158",
                "product": {
                  "name": "Check Point SmartConsole Security Gateway R81.20  Jumbo Hotfix Take 158",
                  "product_id": "T057158-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:checkpoint:smartconsole:security_gateway_r81.20___jumbo_hotfix_take_158"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SmartConsole"
          }
        ],
        "category": "vendor",
        "name": "Check Point"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-16232",
      "product_status": {
        "known_affected": [
          "T057149",
          "T057150",
          "T057151",
          "T057152",
          "T057154",
          "T057148"
        ]
      },
      "release_date": "2026-07-23T22:00:00.000+00:00",
      "title": "CVE-2026-16232"
    },
    {
      "cve": "CVE-2026-62145",
      "product_status": {
        "known_affected": [
          "T057151",
          "T057152",
          "T057154",
          "T057156",
          "T057157",
          "T057158"
        ]
      },
      "release_date": "2026-07-23T22:00:00.000+00:00",
      "title": "CVE-2026-62145"
    },
    {
      "cve": "CVE-2026-62144",
      "product_status": {
        "known_affected": [
          "T057149",
          "T057150",
          "T057151",
          "T057152",
          "T057154",
          "T057148"
        ]
      },
      "release_date": "2026-07-23T22:00:00.000+00:00",
      "title": "CVE-2026-62144"
    }
  ]
}

CVE-2026-16232 (GCVE-0-2026-16232)

Vulnerability from cvelistv5 – Published: 2026-07-22 13:53 – Updated: 2026-08-10 18:34

Title

Authentication Bypass in the SmartConsole Login Process Using an Application Token

Summary

An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers.

Severity

9.3 (Critical)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: active Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-23 03:55 UTC

CWE

CWE-287 - Improper Authentication.

Assigner

checkpoint mitre root Scorecard

References

2 references

URL	Tags
https://support.checkpoint.com/results/sk/sk185169
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource

Impacted products

2 products

Vendor	Product	Version
checkpoint	Quantum Security Management	Affected: R82.10 with Jumbo Hotfix Take 36 or below Affected: R82 with Jumbo Hotfix Take 118 or below Affected: R81.20 with Jumbo Hotfix Take 158 or below Affected: R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30
checkpoint	Multi-Domain Security Management	Affected: R82.10 with Jumbo Hotfix Take 36 or below Affected: R82 with Jumbo Hotfix Take 118 or below Affected: R81.20 with Jumbo Hotfix Take 158 or below Affected: R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-16232",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-23T03:55:51.690584Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2026-07-22",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-16232"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-10T18:34:01.548Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-16232"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Quantum Security Management",
          "vendor": "checkpoint",
          "versions": [
            {
              "status": "affected",
              "version": "R82.10 with Jumbo Hotfix Take 36 or below"
            },
            {
              "status": "affected",
              "version": "R82 with Jumbo Hotfix Take 118 or below"
            },
            {
              "status": "affected",
              "version": "R81.20 with Jumbo Hotfix Take 158 or below"
            },
            {
              "status": "affected",
              "version": "R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30"
            }
          ]
        },
        {
          "product": "Multi-Domain Security Management",
          "vendor": "checkpoint",
          "versions": [
            {
              "status": "affected",
              "version": "R82.10 with Jumbo Hotfix Take 36 or below"
            },
            {
              "status": "affected",
              "version": "R82 with Jumbo Hotfix Take 118 or below"
            },
            {
              "status": "affected",
              "version": "R81.20 with Jumbo Hotfix Take 158 or below"
            },
            {
              "status": "affected",
              "version": "R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-287",
              "description": "CWE-287: Improper Authentication.",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-02T07:06:06.363Z",
        "orgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
        "shortName": "checkpoint"
      },
      "references": [
        {
          "url": "https://support.checkpoint.com/results/sk/sk185169"
        }
      ],
      "title": "Authentication Bypass in the SmartConsole Login Process Using an Application Token",
      "x_generator": {
        "engine": "cveClient/1.0.25"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
    "assignerShortName": "checkpoint",
    "cveId": "CVE-2026-16232",
    "datePublished": "2026-07-22T13:53:09.830Z",
    "dateReserved": "2026-07-19T12:14:17.233Z",
    "dateUpdated": "2026-08-10T18:34:01.548Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-62144 (GCVE-0-2026-62144)

Vulnerability from cvelistv5 – Published: 2026-07-22 13:53 – Updated: 2026-07-24 03:56

Title

Management Authentication Bypass and Privilege Escalation

Summary

An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security Gateways. Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients.

Severity

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-23 00:00 UTC

CWE

CWE-287 - Improper Authentication.

Assigner

checkpoint mitre root Scorecard

References

1 reference

URL	Tags
https://support.checkpoint.com/results/sk/sk185152

Impacted products

2 products

Vendor	Product	Version
checkpoint	Quantum Security Management	Affected: R82.10 with Jumbo Hotfix Take 36 or below Affected: R82 with Jumbo Hotfix Take 118 or below Affected: R81.20 with Jumbo Hotfix Take 158 or below Affected: R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30
checkpoint	Multi-Domain Security Management	Affected: R82.10 with Jumbo Hotfix Take 36 or below Affected: R82 with Jumbo Hotfix Take 118 or below Affected: R81.20 with Jumbo Hotfix Take 158 or below Affected: R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 9.1,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-62144",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-23T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-24T03:56:14.016Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Quantum Security Management",
          "vendor": "checkpoint",
          "versions": [
            {
              "status": "affected",
              "version": "R82.10 with Jumbo Hotfix Take 36 or below"
            },
            {
              "status": "affected",
              "version": "R82 with Jumbo Hotfix Take 118 or below"
            },
            {
              "status": "affected",
              "version": "R81.20 with Jumbo Hotfix Take 158 or below"
            },
            {
              "status": "affected",
              "version": "R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30"
            }
          ]
        },
        {
          "product": "Multi-Domain Security Management",
          "vendor": "checkpoint",
          "versions": [
            {
              "status": "affected",
              "version": "R82.10 with Jumbo Hotfix Take 36 or below"
            },
            {
              "status": "affected",
              "version": "R82 with Jumbo Hotfix Take 118 or below"
            },
            {
              "status": "affected",
              "version": "R81.20 with Jumbo Hotfix Take 158 or below"
            },
            {
              "status": "affected",
              "version": "R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security Gateways. Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients."
        }
      ],
      "metrics": [
        {
          "format": "CVSS",
          "other": {
            "content": {
              "attackComplexity": "LOW",
              "attackRequirements": "NONE",
              "attackVector": "NETWORK",
              "baseScore": 9.3,
              "baseSeverity": "CRITICAL",
              "privilegesRequired": "NONE",
              "subAvailabilityImpact": "NONE",
              "subConfidentialityImpact": "NONE",
              "subIntegrityImpact": "NONE",
              "userInteraction": "NONE",
              "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
              "version": "4.0",
              "vulnAvailabilityImpact": "HIGH",
              "vulnConfidentialityImpact": "HIGH",
              "vulnIntegrityImpact": "HIGH"
            },
            "type": "CVSSv4.0"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-287",
              "description": "CWE-287: Improper Authentication.",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-22T13:57:08.986Z",
        "orgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
        "shortName": "checkpoint"
      },
      "references": [
        {
          "url": "https://support.checkpoint.com/results/sk/sk185152"
        }
      ],
      "title": "Management Authentication Bypass and Privilege Escalation"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
    "assignerShortName": "checkpoint",
    "cveId": "CVE-2026-62144",
    "datePublished": "2026-07-22T13:53:35.969Z",
    "dateReserved": "2026-07-13T10:24:07.648Z",
    "dateUpdated": "2026-07-24T03:56:14.016Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-62145 (GCVE-0-2026-62145)

Vulnerability from cvelistv5 – Published: 2026-07-22 13:53 – Updated: 2026-07-24 03:56

Title

Local Privilege Escalation in Gaia Portal

Summary

A vulnerability in Check Point Gaia Portal allows an authenticated attacker with read-only Gaia Portal privileges to execute commands with root privileges.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-23 00:00 UTC

CWE

CWE-269 - Improper Privilege Management.

Assigner

checkpoint mitre root Scorecard

References

1 reference

URL	Tags
https://support.checkpoint.com/results/sk/sk185153

Impacted products

2 products

Vendor	Product	Version
checkpoint	Quantum Security Gateway	Affected: R82.10 with Jumbo Hotfix Take 36 or below Affected: R82 with Jumbo Hotfix Take 118 or below Affected: R81.20 with Jumbo Hotfix Take 158 or below Affected: R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30
checkpoint	Quantum Security Management	Affected: R82.10 with Jumbo Hotfix Take 36 or below Affected: R82 with Jumbo Hotfix Take 118 or below Affected: R81.20 with Jumbo Hotfix Take 158 or below Affected: R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-62145",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-23T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-24T03:56:05.075Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Quantum Security Gateway",
          "vendor": "checkpoint",
          "versions": [
            {
              "status": "affected",
              "version": "R82.10 with Jumbo Hotfix Take 36 or below"
            },
            {
              "status": "affected",
              "version": "R82 with Jumbo Hotfix Take 118 or below"
            },
            {
              "status": "affected",
              "version": "R81.20 with Jumbo Hotfix Take 158 or below"
            },
            {
              "status": "affected",
              "version": "R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30"
            }
          ]
        },
        {
          "product": "Quantum Security Management",
          "vendor": "checkpoint",
          "versions": [
            {
              "status": "affected",
              "version": "R82.10 with Jumbo Hotfix Take 36 or below"
            },
            {
              "status": "affected",
              "version": "R82 with Jumbo Hotfix Take 118 or below"
            },
            {
              "status": "affected",
              "version": "R81.20 with Jumbo Hotfix Take 158 or below"
            },
            {
              "status": "affected",
              "version": "R81.10, R81, R80.30, R80.20, R80.10, R80, and R77.30"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in Check Point Gaia Portal allows an authenticated attacker with read-only Gaia Portal privileges to execute commands with root privileges."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-269",
              "description": "CWE-269: Improper Privilege Management.",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-22T13:57:12.312Z",
        "orgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
        "shortName": "checkpoint"
      },
      "references": [
        {
          "url": "https://support.checkpoint.com/results/sk/sk185153"
        }
      ],
      "title": "Local Privilege Escalation in Gaia Portal"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45",
    "assignerShortName": "checkpoint",
    "cveId": "CVE-2026-62145",
    "datePublished": "2026-07-22T13:53:53.656Z",
    "dateReserved": "2026-07-13T10:24:07.648Z",
    "dateUpdated": "2026-07-24T03:56:05.075Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

WID-SEC-W-2026-2495

CVE-2026-16232 (GCVE-0-2026-16232)

CVE-2026-62144 (GCVE-0-2026-62144)

CVE-2026-62145 (GCVE-0-2026-62145)

Tags

Sightings

Nomenclature

Related by attack behaviour