checkpoint Vulnerabilities and Affected Products
Vulnerabilities associated with Security Management Server.
Products
Clear product- Quantum Security Gateway8 vulnerabilities
- Quantum Security Management4 vulnerabilities
- Check Point Mobile Access3 vulnerabilities
- Check Point SmartConsole2 vulnerabilities
- Identity Agent2 vulnerabilities
- Multi-Domain Security Management2 vulnerabilities
- Spark Firewalls2 vulnerabilities
- Check Point Harmony SASE1 vulnerability
- Check Point Management Log Server1 vulnerability
- Check Point Quantum Gateway, Spark Gateway and CloudGuard Network1 vulnerability
- cloudguard_network1 vulnerability
- clusterxl1 vulnerability
- ClusterXL, Multi-Domain Security Management, Quantum Appliances, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Security Management1 vulnerability
- gaia_portal1 vulnerability
- Harmony Endpoint Security Client for Windows1 vulnerability
- Harmony Endpoint.1 vulnerability
- harmony_endpoint1 vulnerability
- Hramony SASE1 vulnerability
- Identity Awareness1 vulnerability
- identity_agent1 vulnerability
- Multi-Domain Security Management Server1 vulnerability
- Multi-Domain Security Management, Quantum Security Management1 vulnerability
- multi-domain_management1 vulnerability
- quantum_appliances1 vulnerability
- quantum_maestro1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-18574CRITICAL | Authentication Bypass in Check Point Security Management ServerAn authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server (MDS) could allow an unauthenticated remote attacker with network access to Management services to execute arbitrary commands on the Security Management Server. Successful exploitation could result in full compromise of the Security Management system. Check Point discovered this issue internally and has no indication of active exploitation. CWE-288Aug 3, 2026 | CVSS9.3v4.0 | EPSS0.991% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |