CVE-2026-48136

4.1 Moyenne

Publiée le 26/05/2026 à 16:16 · Modifiée le 20/07/2026 à 22:10 · En attente d'analyse NVD · Source : cve@checkpoint.com

Description

When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain (CMA) can modify stored metadata associated with Compliance Best Practices in another Management Domain, where the administrator has no access permissions, bypassing Role-Based Access Control (RBAC).

Traduire en français

Produits concernés

checkpoint Quantum Security Management

Scores CVSS

Version	Score	Source	Vecteur
3.1	4.1 Moyenne	cve@checkpoint.com	`CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L`

Faiblesses (CWE)

CWE-89

Références

https://support.checkpoint.com/results/sk/sk184992

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories