CVE-2026-18574CWE-288

CVE-2026-18574

published August 3, 2026

CVSS
9.3
EPSS
1%
Percentile
59.0
In the wild
Unconfirmed
What it is

An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server (MDS) could allow an unauthenticated remote attacker with network access to Management services to execute arbitrary commands on the Security Management Server. Successful exploitation could result in full compromise of the Security Management system. Check Point discovered this issue internally and has no indication of active exploitation.

The record
Technical detail
CVSS
9.3 · NONE
CVSS v4.0
Not supplied
EPSS
0.00890 · 59.0th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2026-08-03T17:17Z
References (1)
EPSS history
Timeline
  • 03 AUG 12:07Z
    Authentication Bypass in Check Point Security Management Server
    cvelistv5