CISA Adds Critical Check Point Flaw to Known Exploited Vulnerabilities Catalog
NEOSEC enrichment — no mirror of the original source
The US Cybersecurity and Infrastructure Security Agency (CISA) has added a critical authentication bypass vulnerability in Check Point's Security Management, Multi-Domain Management, and Security Gateways to the Known Exploited Vulnerabilit
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Editorial context in the original issue
The SANS NewsBites issue carries commentary by: Neely.
Linked advisories
- CVE-2026-50522Microsoft SharePoint Remote Code Execution Vulnerability
- CVE-2026-50522Microsoft SharePoint Enterprise Server 2016: Deserialisierung nicht vertrauenswürdiger Daten
- CVE-2025-68686fortinet fortios: Offenlegung vertraulicher Informationen
- CVE-2026-16232Check Point SmartConsole: Mehrere Schwachstellen
- CVE-2026-16232Check Point SmartConsole — Check Point SmartConsole Improper Authentication Vulnerability
- CVE-2025-68686Fortinet FortiOS: Mehrere Schwachstellen
- CVE-2026-16812arista velocloud_orchestrator: Betriebssystem-Befehlsinjektion
- CVE-2026-16812Arista VeloCloud Orchestrator — Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability
- CVE-2026-50522Microsoft Office Produkte: Mehrere Schwachstellen
- CVE-2026-16232checkpoint multi-domain_security_management: unzureichende Authentifizierung
- CVE-2026-50522Microsoft SharePoint — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
- CVE-2025-68686Fortinet FortiOS — Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Affected vendors and products
- Arista Networks VMware SD-WAN by VeloCloud
- Arista Networks Velocloud Orchestrator On-prem
- Check Point Smartconsole
- Check Point Multi-domain Security Management
- Check Point Quantum Security Management
- Fortinet Fortinet FortiOS
- Microsoft Microsoft Sharepoint Enterprise Server 2016
- Microsoft Microsoft Sharepoint Server 2019
- Microsoft Microsoft Sharepoint Server Subscription Edition
- Microsoft Microsoft SharePoint Server Subscription Edition
More on Catalog
Other advisories
- HighCVE-2026-118078PixelYourSite Product Catalog Feed by PixelYourSite: Deserialisierung nicht vertrauenswürdiger Daten
- HighCVE-2026-118078PixelYourSite Product Catalog Feed by PixelYourSite: Deserialisierung nicht vertrauenswürdiger Daten
- LowCVE-2026-115366OpenBao 2.3.0 before 2.6.3 Missing Root Namespace Enforcement in Plugin Catalog APIs
- MediumCVE-2026-115923Backstage catalog rules can be bypassed for URL locations using encoded path segments
- MediumCVE-2026-115923Backstage catalog rules can be bypassed for URL locations using encoded path segments
- HighCVE-2026-115596impleCode eCommerce Product Catalog: Cross-Site-Scripting (XSS)
- HighCVE-2026-115596impleCode eCommerce Product Catalog: Cross-Site-Scripting (XSS)
- Not ratedosv:CVE-2026-115923Backstage catalog rules can be bypassed for URL locations using encoded path segments
Other news entries
- China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail VisibilityNewsThe Hacker News
- Google to Allow One-Tap Android App Installs From Approved Third-Party Stores Outside U.S.NewsThe Hacker News
- CISA Warns of Node2Shell Exploitation as Honeypots Log Attack AttemptsNewsSecurityWeek
- Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic EmergesNewsThe Hacker News
- CISA confirms PHP2Shell vulnerabilities now exploited in attacksNewsBleepingComputer
- CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code ExecutionNewsThe Hacker News
- NCSC-2026-0444 [1.00] [M/H] Kwetsbaarheden verholpen in Oracle CommunicationsNewsNCSC-NL
- CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard FlawsNewsThe Hacker News
ID