Medium severity · published May 26, 2026
CVE-2026-48136
Authenticated Administrator Role-Based Access Control Bypass in Compliance
4.1
CVSS
3.7%
EPSS
No
On KEV
Description
When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain (CMA) can modify stored metadata associated with Compliance Best Practices in another Management Domain, where the administrator has no access permissions, bypassing Role-Based Access Control (RBAC).
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
High
Privileges
High
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.7% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QS
Quantum Security Management · checkpoint
R82.10 with Jumbo Hotfix Take 6 or below; R82 with Jumbo Hotfix Take 91 or below; R81.20 with Jumbo Hotfix Take 127 or below; All releases from R81.10 and below · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-48136
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-48136
support.checkpoint.com
https://support.checkpoint.com/results/sk/sk184992
More from Quantum Security Management
9.8
CVE-2026-93616
Directory Traversal and File upload allows execution of arbitrary script on the Management Server
9.8
CVE-2026-16232
Authentication Bypass in the SmartConsole Login Process Using an Application Token
9.8
CVE-2026-91843
Stack overflow in login process to the Security Management and Log Servers
9.8
CVE-2026-85103
Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding
9.1
CVE-2026-62144
Management Authentication Bypass and Privilege Escalation