Vulnerability Report

CVE-2026-16232

CISA KEV Active

Title: Check Point SmartConsole Authentication Bypass

Auth Bypass

Proof Of Concept

PoC Available for CVE-2026-16232

CWE Category CWE-287

Published Date Jul 22, 2026

Modified Date Aug 03, 2026

Exploit Status Available

Score 9.3 CVSS v

Exploit Probability (EPSS)

71.39%

Vulnerability Summary

CVE-2026-16232: An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers.

Impacted Vendors

checkpoint 2

Reference Links

https://support.checkpoint.com/results/sk/sk185169

CVSS v4.0

Source Entity [email protected]

Severity CRITICAL

9.3

Attack Vector

NETWORK

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

N/A

RAW VECTOR

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1

Source Entity 134c704f-9b21-4f2e-91b3-4a467353bcc0