Critical severity9.8CISA KEVNVD Advisory· Published Jul 22, 2026· Updated Aug 10, 2026

CVE-2026-16232

Description

An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

123

Checkpoint/Multi Domain Security Management61 versions
cpe:2.3:a:checkpoint:multi-domain_security_management:*:*:*:*:*:*:*:*+ 60 more
- cpe:2.3:a:checkpoint:multi-domain_security_management:*:*:*:*:*:*:*:*range: >=r77.30,<r81.20
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:-:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_101:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_103:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_105:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_10:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_111:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_113:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_115:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_118:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_119:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_120:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_122:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_126:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_127:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_141:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_146:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_14:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_24:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_26:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_38:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_41:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_43:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_45:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_53:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_54:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_65:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_70:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_76:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_79:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_84:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_89:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_8:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_90:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_92:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_96:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_98:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r81.20:take_99:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:-:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_19:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_24:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r82.10:take_6:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r82:-:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_103:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_107:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_10:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_12:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_14:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_18:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_19:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_25:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_33:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_34:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_36:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_39:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_41:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_43:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_44:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_60:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_73:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:multi-domain_security_management:r82:take_91:*:*:*:*:*:*
Checkpoint/Quantum Security Management61 versions
cpe:2.3:a:checkpoint:quantum_security_management:*:*:*:*:*:*:*:*+ 60 more
- cpe:2.3:a:checkpoint:quantum_security_management:*:*:*:*:*:*:*:*range: >=r77.30,<r81.20
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:-:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_101:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_103:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_105:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_10:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_111:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_113:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_115:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_118:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_119:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_120:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_122:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_126:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_127:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_141:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_146:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_14:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_24:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_26:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_38:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_41:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_43:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_45:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_53:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_54:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_65:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_70:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_76:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_79:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_84:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_89:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_8:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_90:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_92:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_96:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_98:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r81.20:take_99:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r82.10:-:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_19:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_24:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r82.10:take_6:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r82:-:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r82:take_103:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r82:take_107:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r82:take_10:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r82:take_12:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r82:take_14:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r82:take_18:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r82:take_19:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r82:take_25:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r82:take_33:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r82:take_34:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r82:take_36:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r82:take_39:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r82:take_41:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r82:take_43:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r82:take_44:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r82:take_60:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r82:take_73:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:quantum_security_management:r82:take_91:*:*:*:*:*:*
Checkpoint/SmartConsolellm-fuzzy

Patches

Vulnerability mechanics

References

support.checkpoint.com/results/sk/sk185169nvdMitigationPatchVendor Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

News mentions

Check Point SmartConsole 0-Day Exploited to Gain Full Administrator Access – PoC Released
Cyber Security News · Jul 29, 2026
Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass
The Hacker News · Jul 29, 2026
Rapid7 Analysis: Check Point SmartConsole Authentication Bypass (CVE-2026-16232)
Rapid7 Blog · Jul 28, 2026
27th July – Threat Intelligence Report
Check Point Research · Jul 27, 2026
⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More
The Hacker News · Jul 27, 2026
Weekly Cyber Security Newsletter Bulletin – Certighost Exploit, Checkpoint 0-day, HTTP/2 Flaw, Notepad++ Plugin Abuse +20 Stories
Cyber Security News · Jul 26, 2026
Week in review: ServiceNow pre-auth RCE exploited in the wild, Hugging Face breached
Help Net Security · Jul 26, 2026
CVE-2026-16232: Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild
Rapid7 Blog · Jul 23, 2026
Attackers exploit critical Check Point flaw to take over firewall management (CVE-2026-16232)
Help Net Security · Jul 23, 2026
New Check Point Zero-Day Vulnerability Exploited in the Wild
SecurityWeek · Jul 23, 2026
Check Point warns of SmartConsole zero-day exploited in attacks
BleepingComputer · Jul 23, 2026
Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access
The Hacker News · Jul 23, 2026
CISA Warns of Check Point Authentication Vulnerability Actively Exploited in the Wild
Cyber Security News · Jul 23, 2026
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Alerts

cvss	0.637
epss	0.058
exploit	0.030
kev	0.120
patch	0.000
ransomware	0.000