CVE-2026-18574 Authentication Bypass in Check Point Security Management Server
Unauthenticated remote attackers can bypass authentication to execute arbitrary commands on Check Point Security Management Servers, leading to full system compromise.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-18574?
CVE-2026-18574 is a critical authentication bypass vulnerability in checkpoint Multi-Domain Security Management Server, published on 3 Aug 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server (MDS) could allow an unauthenticated remote attacker with network access to Management services to execute arbitrary commands on the Security Management Server. Successful exploitation could result in full compromise of the Security Management system. Check Point discovered this issue internally and has no indication of active exploitation.
Weakness: CWE-288
Which versions are affected by CVE-2026-18574?
How do I fix CVE-2026-18574?
No fix has been published for CVE-2026-18574 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2026-18574 being exploited?
There is no known exploitation of CVE-2026-18574 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Sources
Also known as GHSA-79qj-wj2w-h4v7.