CVE-2026-48136

4.1 MEDIUM 4% exploit odds No fix listed

What it is

When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain (CMA) can modify stored metadata associated with Compliance Best Practices in another Management Domain, where the administrator has no access permissions, bypassing Role-Based Access Control (RBAC).

At a glance

Exploitability: Can be exploited over the network with an admin-level account. Limited direct impact.
Exploit odds: 3.7% chance of exploitation in the next 30 days (EPSS).
Fix: No patch or advisory is linked yet. Look at mitigations or restrict exposure.