Lucene search
+L

66 matches found

Rapid7 Blog
Rapid7 Blog
added 4 days ago11 views

CVE-2026-16232: Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild

Overview On July 22, 2026, Check Point published a security advisory for multiple vulnerabilities affecting Security Management, Multi-Domain Management, and firewall products. The most urgent of these is CVE-2026-16232, an authentication bypass in the SmartConsole login process classified as...

9.1CVSS6.2AI score0.20623EPSS
SaveExploits0
The Hacker News
The Hacker News
added 4 days ago6 views

Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access

Check Point has released security updates to address multiple vulnerabilities impacting Security Management and Multi-Domain Management MDSM products, including a critical flaw that has come under active exploitation in the wild. The security flaw, tracked as CVE-2026-16232 CVSS score: 9.3, is an...

9.1CVSS6.2AI score0.20623EPSS
SaveExploits0
Rockylinux
Rockylinux
added 2026/07/05 12:5 p.m.7 views

mod_md security update

An update is available for modmd. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list This module manages common properties of domains for one or more virtual hosts...

7.3CVSS7AI score0.00628EPSS
SaveExploits0
OSV
OSV
added 2026/07/05 12:5 p.m.7 views

RLSA-2026:30845 Moderate: mod_md security update

This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol to automate certificate provisioning. Certificates will be configured for managed domains and their virtual hosts automatically, including at renewal. Security Fixes: httpd:...

7.5CVSS5.9AI score0.00628EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/01 12:3 p.m.5 views

RLSA-2026:30844 Moderate: mod_md security update

This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol to automate certificate provisioning. Certificates will be configured for managed domains and their virtual hosts automatically, including at renewal. Security Fixes: httpd:...

7.5CVSS7.1AI score0.00628EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/06/02 4:1 p.m.17 views

CVE-2026-48136

When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain CMA can modify stored metadata associated with Compliance Best Practices in another Management Domain, where the administrator has no access permission...

4.1CVSS5.8AI score0.04102EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/26 12:57 p.m.13 views

CVE-2026-48136

When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain CMA can modify stored metadata associated with Compliance Best Practices in another Management Domain, where the administrator has no access permission...

4.1CVSS5.8AI score0.04102EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/05/26 12:57 p.m.15 views

CVE-2026-48136 Authenticated Administrator Role-Based Access Control Bypass in Compliance

When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain CMA can modify stored metadata associated with Compliance Best Practices in another Management Domain, where the administrator has no access permission...

4.1CVSS5.8AI score0.04102EPSS
SaveExploits0References1
CVE
CVE
added 2026/05/26 12:57 p.m.46 views

CVE-2026-48136

CVE-2026-48136 affects Check Point Multi-Domain Management where, when Compliance is enabled, an authenticated administrator with read-write access to one Management Domain (CMA) can modify stored metadata for Compliance Best Practices in another CMA where they have no access, effectively bypassi...

4.1CVSS5.8AI score0.04102EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/05/26 12:57 p.m.52 views

CVE-2026-48136 Authenticated Administrator Role-Based Access Control Bypass in Compliance

When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain CMA can modify stored metadata associated with Compliance Best Practices in another Management Domain, where the administrator has no access permission...

4.1CVSS0.04102EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/26 12:0 a.m.11 views

Check Point Multi-Domain Management 安全漏洞

Check Point Multi-Domain Management is a centralized security management platform provided by Check Point Israel. Check Point Multi-Domain Management has a security vulnerability. This vulnerability arises from the fact that when compliance is enabled in the multi-domain management system, verifi...

4.1CVSS5.8AI score0.04102EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/26 12:0 a.m.16 views

PT-2026-43240

When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain CMA can modify stored metadata associated with Compliance Best Practices in another Management Domain, where the administrator has no access permission...

4.1CVSS5.8AI score0.04102EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/24 12:0 a.m.18 views

PT-2026-34924

In the Linux kernel, the following vulnerability has been resolved: i2c: designware: amdisp: Fix resume-probe race condition issue Identified resume-probe race condition in kernel v7.0 with the commit 38fa29b01a6a "i2c: designware: Combine the init functions",but this issue existed from the...

5.3AI score0.00088EPSS
SaveExploits0References4
OSV
OSV
added 2025/12/22 12:0 a.m.6 views

ALSA-2025:23739 Important: mod_md security update

This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol to automate certificate provisioning. Certificates will be configured for managed domains and their virtual hosts automatically, including at renewal. Security Fixes: modmd:...

7.5CVSS6.8AI score0.00417EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/12/03 12:0 a.m.6 views

PT-2025-48951

WebPros Plesk before 18.0.73.5 and 18.0.74 before 18.0.74.2 on Linux allows remote authenticated users to execute arbitrary code as root via domain creation. The attacker needs "Create and manage sites" with "Domains management" and "Subdomains management."...

7.8CVSS7.8AI score0.00224EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2011-2647

Malware in sbrugna...

3.6CVSS6.3AI score0.00302EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2012-5982

Malware in sbrugna...

2.1CVSS6.3AI score0.00371EPSS
SaveExploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2021-19556

Malware in sbrugna...

5.7CVSS5.2AI score0.00791EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2024-22274

Malicious code in bioql PyPI...

5.3CVSS6.6AI score0.00386EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:25 a.m.10 views

CVE-2024-42612

Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/domainmanagement.php?whitelistadd...

8.8CVSS7.5AI score0.00273EPSS
SaveExploits1References1
Rows per page
Query Builder