CVE-2026-18574 is an authentication bypass vulnerability affecting Check Point Security Management Server and Multi-Domain Security Management Server (MDS). It enables an unauthenticated remote attacker with network access to management services to execute arbitrary commands on the server, potentially resulting in complete compromise of the security management infrastructure. The vulnerability was internally discovered by Check Point, and no active exploitation has been reported. No official patch or remediation information is currently available.

Successful exploitation allows unauthenticated remote attackers to execute arbitrary commands on the affected servers, leading to full compromise of the Check Point Security Management system. This could severely impact the confidentiality, integrity, and availability of the security management environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is provided, monitor vendor communications closely for updates and apply patches promptly once available.