https://vulnerability.circl.lu/sightings/feed 2026-08-05T16:10:51.978509+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/ad92106f-4dc9-4465-b599-1c3ceea7b353/export 2026-08-05T16:10:51.997867+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ad92106f-4dc9-4465-b599-1c3ceea7b353", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mscpueke5k2o", "content": "Top 3 CVE for last 7 days:\nCVE-2026-66066: 42 interactions\nCVE-2026-18577: 32 interactions\nCVE-2026-58048: 15 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-58048: 15 interactions\nCVE-2026-18574: 8 interactions\nCVE-2026-15307: 6 interactions\n", "creation_timestamp": "2026-08-05T04:46:34.939771Z"} 2026-08-05T04:46:34.939771+00:00 https://vulnerability.circl.lu/sighting/95754ce0-4154-468e-a228-b97918f6aa7e/export 2026-08-05T16:10:52.000665+00:00 Joseph Lee https://vulnerability.circl.lu/user/syspect {"uuid": "95754ce0-4154-468e-a228-b97918f6aa7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/checkpoint-security-advisory-av26-774", "content": "", "creation_timestamp": "2026-08-04T16:15:27.947467Z"} 2026-08-04T16:15:27.947467+00:00 https://vulnerability.circl.lu/sighting/72571a42-7ea0-493c-9b56-2bd455dd717d/export 2026-08-05T16:10:52.001680+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "72571a42-7ea0-493c-9b56-2bd455dd717d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3msbfge7k4v24", "content": "~Cybergcca~\nSix advisories covering critical vulnerabilities in N-able, IBM, Dell, WebPros, Tenable, and Check Point products, including an actively exploited N-able flaw.\n-\nIOCs: CVE-2026-18577, CVE-2026-58047, CVE-2026-18574\n-\n...", "creation_timestamp": "2026-08-04T16:07:10.735484Z"} 2026-08-04T16:07:10.735484+00:00 https://vulnerability.circl.lu/sighting/fa19b4a3-c49c-4ebe-8f6f-94d7f5299ec9/export 2026-08-05T16:10:52.001812+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "fa19b4a3-c49c-4ebe-8f6f-94d7f5299ec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msaxe3whbk2m", "content": "\ud83d\udd17 CVE : CVE-2026-18574", "creation_timestamp": "2026-08-04T11:55:18.560983Z"} 2026-08-04T11:55:18.560983+00:00 https://vulnerability.circl.lu/sighting/1c934757-0f93-448f-beec-42bec39a05f0/export 2026-08-05T16:10:52.001917+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1c934757-0f93-448f-beec-42bec39a05f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3msawi3tqfc2c", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-18574\n\nAn authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server (MDS) could allow an u...", "creation_timestamp": "2026-08-04T11:39:39.045047Z"} 2026-08-04T11:39:39.045047+00:00 https://vulnerability.circl.lu/sighting/0fafb38a-b469-4b5f-9143-f06953db833a/export 2026-08-05T16:10:52.002023+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0fafb38a-b469-4b5f-9143-f06953db833a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://gist.github.com/alon710/708ecd948f9cc7bf7b4587e41495dfe8", "content": "# CVE-2026-18574: CVE-2026-18574: Authentication Bypass via Alternate Path in Check Point Security Management Server\n\n> **CVSS Score:** 9.3\n> **Published:** 2026-08-03\n> **Full Report:** https://cvereports.com/reports/CVE-2026-18574\n\n## Summary\nA critical authentication bypass vulnerability (CVE-2026-18574) in Check Point Security Management and Multi-Domain Security Management (MDS) Servers allows unauthenticated remote attackers to execute arbitrary system commands with administrative privileges. The flaw stems from an alternate path authentication bypass (CWE-288) in the management interface daemons.\n\n## TL;DR\nUnauthenticated remote command execution on Check Point Security Management Servers via alternate path authentication bypass (CWE-288), CVSS 9.3.\n\n## Technical Details\n\n- **CWE ID**: CWE-288\n- **Attack Vector**: Network\n- **CVSS**: 9.3\n- **EPSS**: Not assigned\n- **Impact**: Arbitrary Command Execution / Full Compromise\n- **Exploit Status**: None\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Check Point Security Management Server\n- Check Point Multi-Domain Security Management Server (MDS)\n- **Check Point Security Management Server / MDS**: R81.20 (Fixed in: `R81.20 Jumbo HFA Take 161`)\n- **Check Point Security Management Server / MDS**: R82 (Fixed in: `R82 Jumbo HFA Take 122`)\n- **Check Point Security Management Server / MDS**: R82.10 (Fixed in: `R82.10 Jumbo HFA Take 40`)\n\n## Mitigation\n\n- Apply Jumbo Hotfix Accumulator updates for R81.20, R82, or R82.10 immediately.\n- Restrict administrative GUI clients (Trusted Clients) in SmartConsole to authorized IPs.\n- Isolate administrative ports (TCP 18190, 443, 19009) from untrusted networks and the public internet.\n\n**Remediation Steps:**\n1. Identify current software version and Jumbo Hotfix Take running on the Security Management Server or Multi-Domain Server.\n2. For R82.10, install Jumbo Hotfix Accumulator starting from Take 40.\n3. For R82, install Jumbo Hotfix Accumulator starting from Take 122.\n4. For R81.20, install Jumbo Hotfix Accumulator starting from Take 161.\n5. For legacy versions (R81.10, R81, R80.x), upgrade to a supported release first.\n6. Open SmartConsole, navigate to Manage & Settings > Permissions & Administrators > Trusted Clients, and restrict access to authorized administration hosts.\n7. Apply firewall rules to enforce network-level restrictions on administrative ports.\n\n## References\n\n- [Check Point Support Advisory sk185222](https://support.checkpoint.com/results/sk/sk185222)\n- [Official CVE Record on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-18574)\n- [Check Point Gateway and Management Hardening Guide](https://sc1.checkpoint.com/documents/Check_Point_Gateway_and_Management_Hardening/CP_Check_Point_Gateway_and_Management_Hardening.pdf)\n- [Jumbo Hotfix Accumulator for R82.10 Home Page](https://sc1.checkpoint.com/documents/Jumbo_HFA/R82.10/Default.htm)\n- [Jumbo Hotfix Accumulator for R82 Home Page](https://sc1.checkpoint.com/documents/Jumbo_HFA/R82/Default.htm)\n- [Jumbo Hotfix Accumulator for R81.20 Home Page](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.20/Default.htm)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-18574) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-04T10:01:35.613418Z"} 2026-08-04T10:01:35.613418+00:00 https://vulnerability.circl.lu/sighting/ba24fa24-03e7-42c3-a7d1-bef1ea57d51a/export 2026-08-05T16:10:52.002153+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ba24fa24-03e7-42c3-a7d1-bef1ea57d51a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3msacnlr7rx2b", "content": "Check Point patches critical authentication bypass flaw CVE-2026-18574; immediate updates urged to prevent system takeovers. #CyberSecurity #CheckPoint #Vulnerability #CVE202618574 thedailytechfeed.com/check-point-...", "creation_timestamp": "2026-08-04T05:44:49.669773Z"} 2026-08-04T05:44:49.669773+00:00 https://vulnerability.circl.lu/sighting/c157a083-8f57-4164-8051-abd568c84c0c/export 2026-08-05T16:10:52.002252+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c157a083-8f57-4164-8051-abd568c84c0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3msabv3utfu2d", "content": "Check Point waarschuwt voor ernstige kwetsbaarheid in management servers\n\nBeveiligingsbedrijf Check Point heeft een kritieke kwetsbaarheid, met de aanduiding CVE-2026-18574, ontdekt in haar Security Management en Multi-Domain Security Management servers. Deze kwetsbaarheid, een zogen...", "creation_timestamp": "2026-08-04T05:31:07.412276Z"} 2026-08-04T05:31:07.412276+00:00 https://vulnerability.circl.lu/sighting/6923328c-f748-4718-8072-3ae958b52d5d/export 2026-08-05T16:10:52.002361+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6923328c-f748-4718-8072-3ae958b52d5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3msabemd3uw2c", "content": "CVE-2026-18574: Check Point\u306e\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306b\u3088\u308a\u7ba1\u7406\u30b5\u30fc\u30d0\u30fc\u304c\u4fb5\u5bb3\u3055\u308c\u308b \n\nCVE-2026-18574: Check Point Authentication Bypass Hits Management Server #DailyCyberSecurity (Aug 3)\n\nsecurityonline.info/cve-2026-185...", "creation_timestamp": "2026-08-04T05:21:53.589779Z"} 2026-08-04T05:21:53.589779+00:00 https://vulnerability.circl.lu/sighting/8a7b3e16-8ce5-4cb3-b5a2-e55f78c36837/export 2026-08-05T16:10:52.002459+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "8a7b3e16-8ce5-4cb3-b5a2-e55f78c36837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3ms6vgyo6yy2y", "content": "CVE-2026-18574 is a Check Point authentication bypass rated CVSS 9.3, letting attackers run commands as admin. Patch via the latest Jumbo Hotfix.\n\n#CheckPoint #CVE202618574 #AuthenticationBypass #SecurityManagement #CyberSecurity #Firewall", "creation_timestamp": "2026-08-03T16:15:49.867533Z"} 2026-08-03T16:15:49.867533+00:00