CVE-2026-48136
MEDIUM
NVD
CVSS Score
4.1
Severity
MEDIUM
Published
May 26, 2026
Vendor
unknown
Description
When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain (CMA) can modify stored metadata associated with Compliance Best Practices in another Management Domain, where the administrator has no access permissions, bypassing Role-Based Access Control (RBAC).