CVE-2026-62144

This is a security weakness in your Check Point management software that can let an attacker skip the login step. If the attacker can reach your Management Server over the network and your “Trusted Client” access is not tightly limited, they may be able to run powerful admin commands from the outside—like taking the keys to your security system’s control panel.

This matters if you run Check Point quantum security management or Check Point Multi-Domain Security Management and you have a Management Server that’s reachable over the network, especially from the internet. It also depends on whether your setup restricts “Trusted Clients”—if it does not, attackers have a clear path in. Treat it as a risk only when the attacker can reach the Management Server and your Trusted Client access controls don’t block unauthenticated remote attempts.

This is RED because exploitation has been reported as active in the wild, meaning attackers are using this weakness against real organizations. The flaw is remotely reachable without authentication when the Management Server is exposed and Trusted Client restrictions are insufficient, so exposure can translate directly into takeover of security management.