CVE-2026-48136
Authenticated Administrator Role-Based Access Control Bypass in Compliance
Exploited
Not listed
EPSS
0.003
15.5th percentile
Discovered by
Not disclosed
Published
May 26, 2026
Assigned by checkpoint
Description
When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain (CMA) can modify stored metadata associated with Compliance Best Practices in another Management Domain, where the administrator has no access permissions, bypassing Role-Based Access Control (RBAC).
Weakness: CWE-89
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Check Point | Quantum Security Management | Network & Security Management | cna-assigner |
Vendor-reported products (1)
- checkpoint · Quantum Security Management