{"vulnerability": "CVE-2026-18574", "sightings": [{"uuid": "6923328c-f748-4718-8072-3ae958b52d5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3msabemd3uw2c", "content": "CVE-2026-18574: Check Point\u306e\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306b\u3088\u308a\u7ba1\u7406\u30b5\u30fc\u30d0\u30fc\u304c\u4fb5\u5bb3\u3055\u308c\u308b \n\nCVE-2026-18574: Check Point Authentication Bypass Hits Management Server  #DailyCyberSecurity (Aug 3)\n\nsecurityonline.info/cve-2026-185...", "creation_timestamp": "2026-08-04T05:21:53.589779Z"}, {"uuid": "c157a083-8f57-4164-8051-abd568c84c0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3msabv3utfu2d", "content": "Check Point waarschuwt voor ernstige kwetsbaarheid in management servers\n\nBeveiligingsbedrijf Check Point heeft een kritieke kwetsbaarheid, met de aanduiding CVE-2026-18574, ontdekt in haar Security Management en Multi-Domain Security Management servers. Deze kwetsbaarheid, een zogen...", "creation_timestamp": "2026-08-04T05:31:07.412276Z"}, {"uuid": "ba24fa24-03e7-42c3-a7d1-bef1ea57d51a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3msacnlr7rx2b", "content": "Check Point patches critical authentication bypass flaw CVE-2026-18574; immediate updates urged to prevent system takeovers. #CyberSecurity #CheckPoint #Vulnerability #CVE202618574 thedailytechfeed.com/check-point-...", "creation_timestamp": "2026-08-04T05:44:49.669773Z"}, {"uuid": "72571a42-7ea0-493c-9b56-2bd455dd717d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3msbfge7k4v24", "content": "~Cybergcca~\nSix advisories covering critical vulnerabilities in N-able, IBM, Dell, WebPros, Tenable, and Check Point products, including an actively exploited N-able flaw.\n-\nIOCs: CVE-2026-18577, CVE-2026-58047, CVE-2026-18574\n-\n...", "creation_timestamp": "2026-08-04T16:07:10.735484Z"}, {"uuid": "95754ce0-4154-468e-a228-b97918f6aa7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/checkpoint-security-advisory-av26-774", "content": "", "creation_timestamp": "2026-08-04T16:15:27.947467Z"}, {"uuid": "0fafb38a-b469-4b5f-9143-f06953db833a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://gist.github.com/alon710/708ecd948f9cc7bf7b4587e41495dfe8", "content": "# CVE-2026-18574: CVE-2026-18574: Authentication Bypass via Alternate Path in Check Point Security Management Server\n\n> **CVSS Score:** 9.3\n> **Published:** 2026-08-03\n> **Full Report:** https://cvereports.com/reports/CVE-2026-18574\n\n## Summary\nA critical authentication bypass vulnerability (CVE-2026-18574) in Check Point Security Management and Multi-Domain Security Management (MDS) Servers allows unauthenticated remote attackers to execute arbitrary system commands with administrative privileges. The flaw stems from an alternate path authentication bypass (CWE-288) in the management interface daemons.\n\n## TL;DR\nUnauthenticated remote command execution on Check Point Security Management Servers via alternate path authentication bypass (CWE-288), CVSS 9.3.\n\n## Technical Details\n\n- **CWE ID**: CWE-288\n- **Attack Vector**: Network\n- **CVSS**: 9.3\n- **EPSS**: Not assigned\n- **Impact**: Arbitrary Command Execution / Full Compromise\n- **Exploit Status**: None\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Check Point Security Management Server\n- Check Point Multi-Domain Security Management Server (MDS)\n- **Check Point Security Management Server / MDS**: R81.20 (Fixed in: `R81.20 Jumbo HFA Take 161`)\n- **Check Point Security Management Server / MDS**: R82 (Fixed in: `R82 Jumbo HFA Take 122`)\n- **Check Point Security Management Server / MDS**: R82.10 (Fixed in: `R82.10 Jumbo HFA Take 40`)\n\n## Mitigation\n\n- Apply Jumbo Hotfix Accumulator updates for R81.20, R82, or R82.10 immediately.\n- Restrict administrative GUI clients (Trusted Clients) in SmartConsole to authorized IPs.\n- Isolate administrative ports (TCP 18190, 443, 19009) from untrusted networks and the public internet.\n\n**Remediation Steps:**\n1. Identify current software version and Jumbo Hotfix Take running on the Security Management Server or Multi-Domain Server.\n2. For R82.10, install Jumbo Hotfix Accumulator starting from Take 40.\n3. For R82, install Jumbo Hotfix Accumulator starting from Take 122.\n4. For R81.20, install Jumbo Hotfix Accumulator starting from Take 161.\n5. For legacy versions (R81.10, R81, R80.x), upgrade to a supported release first.\n6. Open SmartConsole, navigate to Manage & Settings > Permissions & Administrators > Trusted Clients, and restrict access to authorized administration hosts.\n7. Apply firewall rules to enforce network-level restrictions on administrative ports.\n\n## References\n\n- [Check Point Support Advisory sk185222](https://support.checkpoint.com/results/sk/sk185222)\n- [Official CVE Record on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-18574)\n- [Check Point Gateway and Management Hardening Guide](https://sc1.checkpoint.com/documents/Check_Point_Gateway_and_Management_Hardening/CP_Check_Point_Gateway_and_Management_Hardening.pdf)\n- [Jumbo Hotfix Accumulator for R82.10 Home Page](https://sc1.checkpoint.com/documents/Jumbo_HFA/R82.10/Default.htm)\n- [Jumbo Hotfix Accumulator for R82 Home Page](https://sc1.checkpoint.com/documents/Jumbo_HFA/R82/Default.htm)\n- [Jumbo Hotfix Accumulator for R81.20 Home Page](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.20/Default.htm)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-18574) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-04T10:01:35.613418Z"}, {"uuid": "1c934757-0f93-448f-beec-42bec39a05f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3msawi3tqfc2c", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-18574\n\nAn authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server (MDS) could allow an u...", "creation_timestamp": "2026-08-04T11:39:39.045047Z"}, {"uuid": "fa19b4a3-c49c-4ebe-8f6f-94d7f5299ec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msaxe3whbk2m", "content": "\ud83d\udd17 CVE : CVE-2026-18574", "creation_timestamp": "2026-08-04T11:55:18.560983Z"}, {"uuid": "73f7ef7c-2bce-4214-acec-8248093c3560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18574", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117031818277568421", "content": "CRITICAL auth bypass (CVE-2026-18574, CVSS 9.3) affects Check Point Security Management Server & MDS. Remote attackers can execute commands w/o auth. No patch yet \u2014 restrict management access. https://radar.offseq.com/threat/cve-2026-18574-cwe-288-authentication-bypass-using-an-alternate-path-or-channel-in-checkpoint-security-b30ba167a9a0b365 #OffSeq #CVE202618574 #CheckPoint #Infosec \ud83d\udd12", "creation_timestamp": "2026-08-03T13:30:30.459243Z"}, {"uuid": "e696602f-3dc0-4df4-8675-1517e9b26f76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms6n3aody32l", "content": "CVE-2026-18574 - security management server\nAn unauthenticated attacker could access and control Check Point Security Management Servers, potentially taking full control of the system. This vulnerability affects\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#checkpoint #CVE #infosec", "creation_timestamp": "2026-08-03T13:46:05.021740Z"}, {"uuid": "8a7b3e16-8ce5-4cb3-b5a2-e55f78c36837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3ms6vgyo6yy2y", "content": "CVE-2026-18574 is a Check Point authentication bypass rated CVSS 9.3, letting attackers run commands as admin. Patch via the latest Jumbo Hotfix.\n\n#CheckPoint #CVE202618574 #AuthenticationBypass #SecurityManagement #CyberSecurity #Firewall", "creation_timestamp": "2026-08-03T16:15:49.867533Z"}]}