This vulnerability (CVE-2026-48136) in Check Point Quantum Security Management arises when Compliance is enabled on Multi-Domain Management. An authenticated administrator with read-write privileges in one Management Domain can exploit improper input handling (CWE-89: SQL Injection) to alter stored metadata related to Compliance Best Practices in a different Management Domain where they lack access rights. This effectively bypasses Role-Based Access Control mechanisms. The issue affects multiple versions including R81.10 and earlier with various Jumbo Hotfix Takes. The CVSS 3.1 base score is 4.1, reflecting a medium severity with network attack vector, high attack complexity, and requiring privileges. The vulnerability is published but no vendor remediation or patch is currently documented.

An attacker with authenticated read-write access to one Management Domain can modify compliance metadata in other domains without authorization, violating RBAC policies. This could lead to unauthorized changes in compliance configurations, potentially affecting security posture assessments. The impact on confidentiality, integrity, and availability is rated low to medium as per the CVSS score. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict administrative access to trusted personnel only and monitor for unusual administrative activities. Avoid enabling Compliance on Multi-Domain Management if not necessary. Follow vendor communications closely for updates on patches or mitigations.