« Volver al listado

CVE-2026-18574

Estado: Pendiente de análisisCrítica (9.3)—

An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server (MDS) could allow an unauthenticated remote attacker with network access to Management services to execute arbitrary commands on the Security Management Server. Successful exploitation could result in full compromise of the Security Management system. Check Point discovered this issue internally and has no indication of active exploitation.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

Vector CVSS AV:N/PR:N/UI:N indica vulnerabilidad remota sin autenticación previa. CWE-288 (authentication bypass) y descripción explícita de 'arbitrary commands execution' por atacante no autenticado en servicio de red.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Privileged Account ManagementApplication Developer GuidanceActive Directory ConfigurationVulnerability ScanningUser TrainingUser Account Management

Tecnologías afectadas (2)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Checkpoint — Multi Domain Security Management ServerAICheckpoint — Security Management ServerAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-18574",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-18574",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-08-04T00:00:00+00:00"
        }
      }
    ],
    "cvssMetricV40": [
      {
        "type": "Secondary",
        "source": "cve@checkpoint.com",
        "cvssData": {
          "Safety": "NOT_DEFINED",
          "version": "4.0",
          "Recovery": "NOT_DEFINED",
          "baseScore": 9.3,
          "Automatable": "NOT_DEFINED",
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "exploitMaturity": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "NONE",
          "subIntegrityImpact": "NONE",
          "vulnIntegrityImpact": "HIGH",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "vulnAvailabilityImpact": "HIGH",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "subConfidentialityImpact": "NONE",
          "vulnConfidentialityImpact": "HIGH",
          "confidentialityRequirement": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED"
        }
      }
    ]
  },
  "affected": [
    {
      "source": "cve@checkpoint.com",
      "affectedData": [
        {
          "vendor": "checkpoint",
          "product": "Security Management Server",
          "versions": [
            {
              "status": "affected",
              "version": "R82.10 with Jumbo Hotfix Accumulator Take 39 or below"
            },
            {
              "status": "affected",
              "version": "R82 with Jumbo Hotfix Accumulator Take 121 or below"
            },
            {
              "status": "affected",
              "version": "R81.20 with Jumbo Hotfix Accumulator Take 160 or below"
            },
            {
              "status": "affected",
              "version": "R81.10"
            },
            {
              "status": "affected",
              "version": "R81"
            },
            {
              "status": "affected",
              "version": "R80.40"
            },
            {
              "status": "affected",
              "version": "R80.30"
            },
            {
              "status": "affected",
              "version": "R80.20"
            },
            {
              "status": "affected",
              "version": "R80.10"
            },
            {
              "status": "affected",
              "version": "R80"
            }
          ]
        },
        {
          "vendor": "checkpoint",
          "product": "Multi-Domain Security Management Server",
          "versions": [
            {
              "status": "affected",
              "version": "R82.10 with Jumbo Hotfix Accumulator Take 39 or below"
            },
            {
              "status": "affected",
              "version": "R82 with Jumbo Hotfix Accumulator Take 121 or below"
            },
            {
              "status": "affected",
              "version": "R81.20 with Jumbo Hotfix Accumulator Take 160 or below"
            },
            {
              "status": "affected",
              "version": "R81.10"
            },
            {
              "status": "affected",
              "version": "R81"
            },
            {
              "status": "affected",
              "version": "R80.40"
            },
            {
              "status": "affected",
              "version": "R80.30"
            },
            {
              "status": "affected",
              "version": "R80.20"
            },
            {
              "status": "affected",
              "version": "R80.10"
            },
            {
              "status": "affected",
              "version": "R80"
            }
          ]
        }
      ]
    }
  ],
  "published": "2026-08-03T13:17:13.000",
  "references": [
    {
      "url": "https://support.checkpoint.com/results/sk/sk185222",
      "source": "cve@checkpoint.com"
    }
  ],
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "cve@checkpoint.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-288"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server (MDS) could allow an unauthenticated remote attacker with network access to Management services to execute arbitrary commands on the Security Management Server. Successful exploitation could result in full compromise of the Security Management system. Check Point discovered this issue internally and has no indication of active exploitation."
    }
  ],
  "lastModified": "2026-08-05T05:16:47.433",
  "sourceIdentifier": "cve@checkpoint.com"
}