https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 05 Aug 2026 10:24:07 +0000 https://vulnerability.circl.lu/sighting/ad92106f-4dc9-4465-b599-1c3ceea7b353/export {"uuid": "ad92106f-4dc9-4465-b599-1c3ceea7b353", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mscpueke5k2o", "content": "Top 3 CVE for last 7 days:\nCVE-2026-66066: 42 interactions\nCVE-2026-18577: 32 interactions\nCVE-2026-58048: 15 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-58048: 15 interactions\nCVE-2026-18574: 8 interactions\nCVE-2026-15307: 6 interactions\n", "creation_timestamp": "2026-08-05T04:46:34.939771Z"} {"uuid": "ad92106f-4dc9-4465-b599-1c3ceea7b353", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mscpueke5k2o", "content": "Top 3 CVE for last 7 days:\nCVE-2026-66066: 42 interactions\nCVE-2026-18577: 32 interactions\nCVE-2026-58048: 15 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-58048: 15 interactions\nCVE-2026-18574: 8 interactions\nCVE-2026-15307: 6 interactions\n", "creation_timestamp": "2026-08-05T04:46:34.939771Z"} https://vulnerability.circl.lu/sighting/ad92106f-4dc9-4465-b599-1c3ceea7b353/export Wed, 05 Aug 2026 04:46:34 +0000 https://vulnerability.circl.lu/sighting/95754ce0-4154-468e-a228-b97918f6aa7e/export {"uuid": "95754ce0-4154-468e-a228-b97918f6aa7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/checkpoint-security-advisory-av26-774", "content": "", "creation_timestamp": "2026-08-04T16:15:27.947467Z"} {"uuid": "95754ce0-4154-468e-a228-b97918f6aa7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/checkpoint-security-advisory-av26-774", "content": "", "creation_timestamp": "2026-08-04T16:15:27.947467Z"} https://vulnerability.circl.lu/sighting/95754ce0-4154-468e-a228-b97918f6aa7e/export Tue, 04 Aug 2026 16:15:27 +0000 https://vulnerability.circl.lu/sighting/72571a42-7ea0-493c-9b56-2bd455dd717d/export {"uuid": "72571a42-7ea0-493c-9b56-2bd455dd717d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3msbfge7k4v24", "content": "~Cybergcca~\nSix advisories covering critical vulnerabilities in N-able, IBM, Dell, WebPros, Tenable, and Check Point products, including an actively exploited N-able flaw.\n-\nIOCs: CVE-2026-18577, CVE-2026-58047, CVE-2026-18574\n-\n...", "creation_timestamp": "2026-08-04T16:07:10.735484Z"} {"uuid": "72571a42-7ea0-493c-9b56-2bd455dd717d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3msbfge7k4v24", "content": "~Cybergcca~\nSix advisories covering critical vulnerabilities in N-able, IBM, Dell, WebPros, Tenable, and Check Point products, including an actively exploited N-able flaw.\n-\nIOCs: CVE-2026-18577, CVE-2026-58047, CVE-2026-18574\n-\n...", "creation_timestamp": "2026-08-04T16:07:10.735484Z"} https://vulnerability.circl.lu/sighting/72571a42-7ea0-493c-9b56-2bd455dd717d/export Tue, 04 Aug 2026 16:07:10 +0000 https://vulnerability.circl.lu/sighting/fa19b4a3-c49c-4ebe-8f6f-94d7f5299ec9/export {"uuid": "fa19b4a3-c49c-4ebe-8f6f-94d7f5299ec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msaxe3whbk2m", "content": "\ud83d\udd17 CVE : CVE-2026-18574", "creation_timestamp": "2026-08-04T11:55:18.560983Z"} {"uuid": "fa19b4a3-c49c-4ebe-8f6f-94d7f5299ec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msaxe3whbk2m", "content": "\ud83d\udd17 CVE : CVE-2026-18574", "creation_timestamp": "2026-08-04T11:55:18.560983Z"} https://vulnerability.circl.lu/sighting/fa19b4a3-c49c-4ebe-8f6f-94d7f5299ec9/export Tue, 04 Aug 2026 11:55:18 +0000 https://vulnerability.circl.lu/sighting/1c934757-0f93-448f-beec-42bec39a05f0/export {"uuid": "1c934757-0f93-448f-beec-42bec39a05f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3msawi3tqfc2c", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-18574\n\nAn authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server (MDS) could allow an u...", "creation_timestamp": "2026-08-04T11:39:39.045047Z"} {"uuid": "1c934757-0f93-448f-beec-42bec39a05f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3msawi3tqfc2c", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-18574\n\nAn authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server (MDS) could allow an u...", "creation_timestamp": "2026-08-04T11:39:39.045047Z"} https://vulnerability.circl.lu/sighting/1c934757-0f93-448f-beec-42bec39a05f0/export Tue, 04 Aug 2026 11:39:39 +0000 https://vulnerability.circl.lu/sighting/0fafb38a-b469-4b5f-9143-f06953db833a/export {"uuid": "0fafb38a-b469-4b5f-9143-f06953db833a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://gist.github.com/alon710/708ecd948f9cc7bf7b4587e41495dfe8", "content": "# CVE-2026-18574: CVE-2026-18574: Authentication Bypass via Alternate Path in Check Point Security Management Server\n\n> **CVSS Score:** 9.3\n> **Published:** 2026-08-03\n> **Full Report:** https://cvereports.com/reports/CVE-2026-18574\n\n## Summary\nA critical authentication bypass vulnerability (CVE-2026-18574) in Check Point Security Management and Multi-Domain Security Management (MDS) Servers allows unauthenticated remote attackers to execute arbitrary system commands with administrative privileges. The flaw stems from an alternate path authentication bypass (CWE-288) in the management interface daemons.\n\n## TL;DR\nUnauthenticated remote command execution on Check Point Security Management Servers via alternate path authentication bypass (CWE-288), CVSS 9.3.\n\n## Technical Details\n\n- **CWE ID**: CWE-288\n- **Attack Vector**: Network\n- **CVSS**: 9.3\n- **EPSS**: Not assigned\n- **Impact**: Arbitrary Command Execution / Full Compromise\n- **Exploit Status**: None\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Check Point Security Management Server\n- Check Point Multi-Domain Security Management Server (MDS)\n- **Check Point Security Management Server / MDS**: R81.20 (Fixed in: `R81.20 Jumbo HFA Take 161`)\n- **Check Point Security Management Server / MDS**: R82 (Fixed in: `R82 Jumbo HFA Take 122`)\n- **Check Point Security Management Server / MDS**: R82.10 (Fixed in: `R82.10 Jumbo HFA Take 40`)\n\n## Mitigation\n\n- Apply Jumbo Hotfix Accumulator updates for R81.20, R82, or R82.10 immediately.\n- Restrict administrative GUI clients (Trusted Clients) in SmartConsole to authorized IPs.\n- Isolate administrative ports (TCP 18190, 443, 19009) from untrusted networks and the public internet.\n\n**Remediation Steps:**\n1. Identify current software version and Jumbo Hotfix Take running on the Security Management Server or Multi-Domain Server.\n2. For R82.10, install Jumbo Hotfix Accumulator starting from Take 40.\n3. For R82, install Jumbo Hotfix Accumulator starting from Take 122.\n4. For R81.20, install Jumbo Hotfix Accumulator starting from Take 161.\n5. For legacy versions (R81.10, R81, R80.x), upgrade to a supported release first.\n6. Open SmartConsole, navigate to Manage & Settings > Permissions & Administrators > Trusted Clients, and restrict access to authorized administration hosts.\n7. Apply firewall rules to enforce network-level restrictions on administrative ports.\n\n## References\n\n- [Check Point Support Advisory sk185222](https://support.checkpoint.com/results/sk/sk185222)\n- [Official CVE Record on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-18574)\n- [Check Point Gateway and Management Hardening Guide](https://sc1.checkpoint.com/documents/Check_Point_Gateway_and_Management_Hardening/CP_Check_Point_Gateway_and_Management_Hardening.pdf)\n- [Jumbo Hotfix Accumulator for R82.10 Home Page](https://sc1.checkpoint.com/documents/Jumbo_HFA/R82.10/Default.htm)\n- [Jumbo Hotfix Accumulator for R82 Home Page](https://sc1.checkpoint.com/documents/Jumbo_HFA/R82/Default.htm)\n- [Jumbo Hotfix Accumulator for R81.20 Home Page](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.20/Default.htm)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-18574) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-04T10:01:35.613418Z"} {"uuid": "0fafb38a-b469-4b5f-9143-f06953db833a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://gist.github.com/alon710/708ecd948f9cc7bf7b4587e41495dfe8", "content": "# CVE-2026-18574: CVE-2026-18574: Authentication Bypass via Alternate Path in Check Point Security Management Server\n\n> **CVSS Score:** 9.3\n> **Published:** 2026-08-03\n> **Full Report:** https://cvereports.com/reports/CVE-2026-18574\n\n## Summary\nA critical authentication bypass vulnerability (CVE-2026-18574) in Check Point Security Management and Multi-Domain Security Management (MDS) Servers allows unauthenticated remote attackers to execute arbitrary system commands with administrative privileges. The flaw stems from an alternate path authentication bypass (CWE-288) in the management interface daemons.\n\n## TL;DR\nUnauthenticated remote command execution on Check Point Security Management Servers via alternate path authentication bypass (CWE-288), CVSS 9.3.\n\n## Technical Details\n\n- **CWE ID**: CWE-288\n- **Attack Vector**: Network\n- **CVSS**: 9.3\n- **EPSS**: Not assigned\n- **Impact**: Arbitrary Command Execution / Full Compromise\n- **Exploit Status**: None\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Check Point Security Management Server\n- Check Point Multi-Domain Security Management Server (MDS)\n- **Check Point Security Management Server / MDS**: R81.20 (Fixed in: `R81.20 Jumbo HFA Take 161`)\n- **Check Point Security Management Server / MDS**: R82 (Fixed in: `R82 Jumbo HFA Take 122`)\n- **Check Point Security Management Server / MDS**: R82.10 (Fixed in: `R82.10 Jumbo HFA Take 40`)\n\n## Mitigation\n\n- Apply Jumbo Hotfix Accumulator updates for R81.20, R82, or R82.10 immediately.\n- Restrict administrative GUI clients (Trusted Clients) in SmartConsole to authorized IPs.\n- Isolate administrative ports (TCP 18190, 443, 19009) from untrusted networks and the public internet.\n\n**Remediation Steps:**\n1. Identify current software version and Jumbo Hotfix Take running on the Security Management Server or Multi-Domain Server.\n2. For R82.10, install Jumbo Hotfix Accumulator starting from Take 40.\n3. For R82, install Jumbo Hotfix Accumulator starting from Take 122.\n4. For R81.20, install Jumbo Hotfix Accumulator starting from Take 161.\n5. For legacy versions (R81.10, R81, R80.x), upgrade to a supported release first.\n6. Open SmartConsole, navigate to Manage & Settings > Permissions & Administrators > Trusted Clients, and restrict access to authorized administration hosts.\n7. Apply firewall rules to enforce network-level restrictions on administrative ports.\n\n## References\n\n- [Check Point Support Advisory sk185222](https://support.checkpoint.com/results/sk/sk185222)\n- [Official CVE Record on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-18574)\n- [Check Point Gateway and Management Hardening Guide](https://sc1.checkpoint.com/documents/Check_Point_Gateway_and_Management_Hardening/CP_Check_Point_Gateway_and_Management_Hardening.pdf)\n- [Jumbo Hotfix Accumulator for R82.10 Home Page](https://sc1.checkpoint.com/documents/Jumbo_HFA/R82.10/Default.htm)\n- [Jumbo Hotfix Accumulator for R82 Home Page](https://sc1.checkpoint.com/documents/Jumbo_HFA/R82/Default.htm)\n- [Jumbo Hotfix Accumulator for R81.20 Home Page](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.20/Default.htm)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-18574) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-04T10:01:35.613418Z"} https://vulnerability.circl.lu/sighting/0fafb38a-b469-4b5f-9143-f06953db833a/export Tue, 04 Aug 2026 10:01:35 +0000 https://vulnerability.circl.lu/sighting/ba24fa24-03e7-42c3-a7d1-bef1ea57d51a/export {"uuid": "ba24fa24-03e7-42c3-a7d1-bef1ea57d51a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3msacnlr7rx2b", "content": "Check Point patches critical authentication bypass flaw CVE-2026-18574; immediate updates urged to prevent system takeovers. #CyberSecurity #CheckPoint #Vulnerability #CVE202618574 thedailytechfeed.com/check-point-...", "creation_timestamp": "2026-08-04T05:44:49.669773Z"} {"uuid": "ba24fa24-03e7-42c3-a7d1-bef1ea57d51a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3msacnlr7rx2b", "content": "Check Point patches critical authentication bypass flaw CVE-2026-18574; immediate updates urged to prevent system takeovers. #CyberSecurity #CheckPoint #Vulnerability #CVE202618574 thedailytechfeed.com/check-point-...", "creation_timestamp": "2026-08-04T05:44:49.669773Z"} https://vulnerability.circl.lu/sighting/ba24fa24-03e7-42c3-a7d1-bef1ea57d51a/export Tue, 04 Aug 2026 05:44:49 +0000 https://vulnerability.circl.lu/sighting/c157a083-8f57-4164-8051-abd568c84c0c/export {"uuid": "c157a083-8f57-4164-8051-abd568c84c0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3msabv3utfu2d", "content": "Check Point waarschuwt voor ernstige kwetsbaarheid in management servers\n\nBeveiligingsbedrijf Check Point heeft een kritieke kwetsbaarheid, met de aanduiding CVE-2026-18574, ontdekt in haar Security Management en Multi-Domain Security Management servers. Deze kwetsbaarheid, een zogen...", "creation_timestamp": "2026-08-04T05:31:07.412276Z"} {"uuid": "c157a083-8f57-4164-8051-abd568c84c0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3msabv3utfu2d", "content": "Check Point waarschuwt voor ernstige kwetsbaarheid in management servers\n\nBeveiligingsbedrijf Check Point heeft een kritieke kwetsbaarheid, met de aanduiding CVE-2026-18574, ontdekt in haar Security Management en Multi-Domain Security Management servers. Deze kwetsbaarheid, een zogen...", "creation_timestamp": "2026-08-04T05:31:07.412276Z"} https://vulnerability.circl.lu/sighting/c157a083-8f57-4164-8051-abd568c84c0c/export Tue, 04 Aug 2026 05:31:07 +0000 https://vulnerability.circl.lu/sighting/6923328c-f748-4718-8072-3ae958b52d5d/export {"uuid": "6923328c-f748-4718-8072-3ae958b52d5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3msabemd3uw2c", "content": "CVE-2026-18574: Check Point\u306e\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306b\u3088\u308a\u7ba1\u7406\u30b5\u30fc\u30d0\u30fc\u304c\u4fb5\u5bb3\u3055\u308c\u308b \n\nCVE-2026-18574: Check Point Authentication Bypass Hits Management Server #DailyCyberSecurity (Aug 3)\n\nsecurityonline.info/cve-2026-185...", "creation_timestamp": "2026-08-04T05:21:53.589779Z"} {"uuid": "6923328c-f748-4718-8072-3ae958b52d5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3msabemd3uw2c", "content": "CVE-2026-18574: Check Point\u306e\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306b\u3088\u308a\u7ba1\u7406\u30b5\u30fc\u30d0\u30fc\u304c\u4fb5\u5bb3\u3055\u308c\u308b \n\nCVE-2026-18574: Check Point Authentication Bypass Hits Management Server #DailyCyberSecurity (Aug 3)\n\nsecurityonline.info/cve-2026-185...", "creation_timestamp": "2026-08-04T05:21:53.589779Z"} https://vulnerability.circl.lu/sighting/6923328c-f748-4718-8072-3ae958b52d5d/export Tue, 04 Aug 2026 05:21:53 +0000 https://vulnerability.circl.lu/sighting/8a7b3e16-8ce5-4cb3-b5a2-e55f78c36837/export {"uuid": "8a7b3e16-8ce5-4cb3-b5a2-e55f78c36837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3ms6vgyo6yy2y", "content": "CVE-2026-18574 is a Check Point authentication bypass rated CVSS 9.3, letting attackers run commands as admin. Patch via the latest Jumbo Hotfix.\n\n#CheckPoint #CVE202618574 #AuthenticationBypass #SecurityManagement #CyberSecurity #Firewall", "creation_timestamp": "2026-08-03T16:15:49.867533Z"} {"uuid": "8a7b3e16-8ce5-4cb3-b5a2-e55f78c36837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18574", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3ms6vgyo6yy2y", "content": "CVE-2026-18574 is a Check Point authentication bypass rated CVSS 9.3, letting attackers run commands as admin. Patch via the latest Jumbo Hotfix.\n\n#CheckPoint #CVE202618574 #AuthenticationBypass #SecurityManagement #CyberSecurity #Firewall", "creation_timestamp": "2026-08-03T16:15:49.867533Z"} https://vulnerability.circl.lu/sighting/8a7b3e16-8ce5-4cb3-b5a2-e55f78c36837/export Mon, 03 Aug 2026 16:15:49 +0000