PT-2026-63408 · Check Point · Smartconsole

CVE-2026-16232 · Published 2026-07-22 · Updated 2026-07-22

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Check Point SmartConsole (affected versions not specified)

Description An authentication bypass in the login process allows an unauthenticated remote attacker to obtain an application login token and authenticate with full administrative privileges. This allows the attacker to modify security policies and security configurations. Exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. This issue has been exploited in a small number of customers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2026-16232

Affected Products

Smartconsole

References · 3

• https://support.checkpoint.com/results/sk/sk185169 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-16232 · Security Note
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-16232 · Note