CVE-2026-18574

Awaiting Analysis Awaiting Analysis - Queue

Authentication Bypass in Check Point Security Management Server

Publication date: 2026-08-03

Last updated on: 2026-08-05

Assigner: Check Point Software Technologies Ltd.

Description

An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server (MDS) could allow an unauthenticated remote attacker with network access to Management services to execute arbitrary commands on the Security Management Server. Successful exploitation could result in full compromise of the Security Management system. Check Point discovered this issue internally and has no indication of active exploitation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-03

Last Modified

2026-08-05

Generated

2026-08-23

AI Q&A

2026-08-03

EPSS Evaluated

2026-08-22

NVD

CVE-2026-18574

EUVD

EUVD-2026-52265

Affected Vendors & Products

Vendor	Product	Version / Range
check_point	security_management_server	*
check_point	multi_domain_security_management_server	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-288	The product requires authentication, but the product has an alternate path or channel that does not require authentication.

Attack-Flow Graph

Executive Summary

This is an authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server (MDS). It allows an unauthenticated remote attacker with network access to Management services to execute arbitrary commands on the Security Management Server. Successful exploitation could lead to full compromise of the Security Management system.

Detection Guidance

This vulnerability allows unauthenticated remote attackers to bypass authentication and execute arbitrary commands on Check Point Security Management Server or MDS. Detection requires checking for unauthorized access attempts or unusual command execution on these servers. Check Point recommends reviewing logs for suspicious activity and ensuring the latest patches are applied.

Impact Analysis

An attacker could gain full control over the Security Management Server, potentially leading to unauthorized access, data breaches, or system manipulation. This could affect network security, data integrity, and operational stability of systems relying on these servers.

Compliance Impact

This vulnerability allows full compromise of the Security Management system, which could lead to unauthorized access to sensitive data. Such a breach may violate compliance requirements under GDPR (data protection) and HIPAA (health information security) by exposing personal or protected health information.

Mitigation Strategies

Apply the latest security patches from Check Point immediately to address the authentication bypass vulnerability in Security Management Server and MDS.

Hi! I’m here to help you understand CVE-2026-18574. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70