CVE-2026-48136

When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain (CMA) can modify stored metadata associated with Compliance Best Practices in another Management Domain, where the administrator has no access permissions, bypassing Role-Based Access Control (RBAC).

CVSS v3 4.1 MEDIUM

4.1^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.7 / Impact : 3.4

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://support.checkpoint.com/results/sk/sk184992

Configurations

No configuration.

History

20 Jul 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Cuando el Cumplimiento está habilitado en Check Point Multi-Domain Management, un administrador autenticado con acceso de lectura y escritura a un Dominio de Gestión (CMA) puede modificar metadatos almacenados asociados con las Mejores Prácticas de Cumplimiento en otro Dominio de Gestión, donde el administrador no tiene permisos de acceso, eludiendo el Control de Acceso Basado en Roles (RBAC).

26 May 2026, 14:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-05-26 14:16

Updated : 2026-07-20 20:10

NVD link : CVE-2026-48136

Mitre link : CVE-2026-48136

CVE.ORG link : CVE-2026-48136

JSON object : View

Products Affected

No product.

CWE

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

{"id": "CVE-2026-48136", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-48136", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-26T18:41:27.298316Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "cve@checkpoint.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "impactScore": 3.4, "exploitabilityScore": 0.7}]}, "affected": [{"source": "cve@checkpoint.com", "affectedData": [{"vendor": "checkpoint", "product": "Quantum Security Management", "versions": [{"status": "affected", "version": "R82.10 with Jumbo Hotfix Take 6 or below"}, {"status": "affected", "version": "R82 with Jumbo Hotfix Take 91 or below"}, {"status": "affected", "version": "R81.20 with Jumbo Hotfix Take 127 or below"}, {"status": "affected", "version": "All releases from R81.10 and below"}]}]}], "published": "2026-05-26T14:16:39.130", "references": [{"url": "https://support.checkpoint.com/results/sk/sk184992", "source": "cve@checkpoint.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "cve@checkpoint.com", "description": [{"lang": "en", "value": "CWE-89"}]}], "descriptions": [{"lang": "en", "value": "When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain (CMA) can modify stored metadata associated with Compliance Best Practices in another Management Domain, where the administrator has no access permissions, bypassing Role-Based Access Control (RBAC)."}, {"lang": "es", "value": "Cuando el Cumplimiento est\u00e1 habilitado en Check Point Multi-Domain Management, un administrador autenticado con acceso de lectura y escritura a un Dominio de Gesti\u00f3n (CMA) puede modificar metadatos almacenados asociados con las Mejores Pr\u00e1cticas de Cumplimiento en otro Dominio de Gesti\u00f3n, donde el administrador no tiene permisos de acceso, eludiendo el Control de Acceso Basado en Roles (RBAC)."}], "lastModified": "2026-07-20T20:10:00.110", "sourceIdentifier": "cve@checkpoint.com"}