216.73.216.145

CVE-2026-62144

· Published 22/07/2026 16:17 · Author: The MITRE Corporation

Labels: CVE-2026-62144

Essential information

Published
22/07/2026 16:17
Modified
—
Author
The MITRE Corporation
Creator
The MITRE Corporation
CVSS
9.1 CRITICAL (v3.1)
CISA KEV
No
CWE
CWE-287
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CVSS metrics

Description

An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security Gateways. Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients.

NVD status

NVD
View on NVD

Relations

STIX relations involving this vulnerability (reports, intrusion sets, indicators, etc.).

Type From To
targets T1068 CVE-2026-62144
targets T1021.001 CVE-2026-62144
targets T1078 CVE-2026-62144
targets T1078.001 CVE-2026-62144
targets T1133 CVE-2026-62144
targets T1548.001 CVE-2026-62144
targets T1562.001 CVE-2026-62144
targets T1190 CVE-2026-62144
targets T1548 CVE-2026-62144
targets T1562 CVE-2026-62144
targets T1021 CVE-2026-62144
targets T1212 CVE-2026-62144

Related entities

Attack reports, intrusion sets, malwares, attack patterns and indicators linked to this vulnerability.

Attack reports (1)

Attack patterns (12)

  • T1068: T1068
    Technique Confidence 100 windows macos MITRE

    Adversaries may exploit software vulnerabilities in an attempt to elevate privileges. Exploitation of a software vulnerability occurs when an adversary takes advantage of a programming error in a…

    · Source: The MITRE Corporation
  • T1021.001: T1021.001
    Technique Confidence 100 windows MITRE

    Adversaries may use [Valid Accounts](https://attack.mitre.org/techniques/T1078) to log into a computer using the Remote Desktop Protocol (RDP). The adversary may then perform actions as the logged-on user. Remote desktop…

    · Source: The MITRE Corporation
  • T1078: T1078
    Technique Confidence 100 windows macos MITRE

    Adversaries may obtain and abuse credentials of existing accounts as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion. Compromised credentials may be used to…

    · Source: The MITRE Corporation
  • T1078.001: T1078.001
    Technique Confidence 100 windows macos MITRE

    Adversaries may obtain and abuse credentials of a default account as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion. Default accounts are those that…

    · Source: The MITRE Corporation
  • T1133: T1133
    Technique Confidence 100 windows macos MITRE

    Adversaries may leverage external-facing remote services to initially access and/or persist within a network. Remote services such as VPNs, Citrix, and other access mechanisms allow users to connect…

    · Source: The MITRE Corporation
  • T1548.001: T1548.001
    Technique Confidence 100 macos linux MITRE

    An adversary may abuse configurations where an application has the setuid or setgid bits set in order to get code running in a different (and possibly more privileged)…

    · Source: The MITRE Corporation
  • T1562.001: T1562.001
    Technique Confidence 100 windows macos MITRE

    Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or…

    · Source: The MITRE Corporation
  • T1190: T1190
    Technique Confidence 100 windows macos MITRE

    Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network. The weakness in the system can be a software bug,…

    · Source: The MITRE Corporation
  • T1548: T1548
    Technique Confidence 100 windows macos MITRE

    Adversaries may circumvent mechanisms designed to control elevate privileges to gain higher-level permissions. Most modern systems contain native elevation control mechanisms that are intended to limit privileges that…

    · Source: The MITRE Corporation
  • T1562: T1562
    Technique Confidence 100 windows macos MITRE

    Adversaries may maliciously modify components of a victim environment in order to hinder or disable defensive mechanisms. This not only involves impairing preventative defenses, such as firewalls and…

    · Source: The MITRE Corporation
  • T1021: T1021
    Technique Confidence 100 windows macos MITRE

    Adversaries may use [Valid Accounts](https://attack.mitre.org/techniques/T1078) to log into a service that accepts remote connections, such as telnet, SSH, and VNC. The adversary may then perform actions as the…

    · Source: The MITRE Corporation
  • T1212: T1212
    Technique Confidence 100 windows macos MITRE

    Adversaries may exploit software vulnerabilities in an attempt to collect credentials. Exploitation of a software vulnerability occurs when an adversary takes advantage of a programming error in a…

    · Source: The MITRE Corporation