4.1
Medium
CVE-2026-48136 When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access…
Description
When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain (CMA) can modify stored metadata associated with Compliance Best Practices in another Management Domain, where the administrator has no access permissions, bypassing Role-Based Access Control (RBAC).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Quantum Security Management | Versions not published |
Other CVEs of Quantum Security Management
The 7 CVEs of Quantum Security Management →
CVE-2026-93616
Check Point Multiple Products Path Traversal Vulnerability
9.8
Critical
CVE-2026-91843
A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root…
9.8
Critical
CVE-2026-85103
A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute…
9.8
Critical
CVE-2026-62145
A vulnerability in Check Point Gaia Portal allows an authenticated attacker with read-only Gaia Portal privileges to…
7.5
High